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OPEN  SEASON  ON  JAVA 

Sun  starts  to  release  pieces  of 
Java  as  open-source  code,  page  8 
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the  Vista  migration  will  be  costly'  pa 
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Reliability  a  Tossup 
In  E-voting  Exit  Poll 

Technology  causes  chaos  in  some 
spots  but  few  problems  in  others 


BY  MARC  L.  SONGINI 

The  jury  is  still  out  on  the  per¬ 
formance  of  e-voting  systems 
throughout  the  country  in  last 
week’s  midterm  elections,  ac¬ 
cording  to  officials  and  techni¬ 
cal  experts  interviewed  during 
and  after  the  vote. 

The  prospect  of 
widespread  use  of 
DREs,  or  direct  record¬ 
ing  electronic  ma¬ 
chines,  most  of  which 
are  touch-screen  sys¬ 
tems,  had  caused  con¬ 


siderable  concern  about  the 
possibility  of  fraud,  hacking  or 
technical  glitches. 

But  in  the  days  after  Tues¬ 
day’s  elections,  it  remained 
unclear  to  what  degree  those 
fears  may  have  been  realized. 

There  were  scattered 
reports  of  technical  or 
procedural  problems 
that  led  to  difficulties 
with  either  registration 
or  voting  in  Colorado, 
Texas,  Florida,  Utah 

E-voting,  page  12 


Observers 
disagree  on 
the  cause  of 
“vote  flipping" 
problems. 
PAGE  14 


Protecting  Data  Becomes 
Top  Security  Priority  for  IT 


Focus  shifts  from 
network  defenses 
to  sensitive  info 

BY  JAIKUMAR  VIJAYAN 

ORLANDO 

Regulatory  requirements  and 
increasing  consumer  concerns 
about  the  exposure  of  personal 
information  are  making  the 
addition  of  data-level  security 
controls  a  top  priority  for  IT 
managers,  according  to  attend¬ 
ees  at  the  Computer  Security 


Institute’s  annual  conference. 

Executives  from  companies 
and  government  agencies  said 
here  last  week  that  after  fo¬ 
cusing  for  years  on  installing 
technologies  such  as  firewalls 
and  intrusion-detection  sys¬ 
tems  to  better  secure  their 
networks,  they  are  rushing  to 
provide  stronger  protections 
for  the  data  in  their  systems. 

“The  data  now  matters 
above  everything  else,”  said 
John  Ceraolo,  director  of  infor- 
Data  Security,  page  64 
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For  most  IT  workers,  pay  raises  have  stalled 
out  at  around  3.1%,  according  to  the  nearly 
15,000  who  took  part  in  Computerworld’s 
20th  Annual  Salary  Survey.  But  for  those 
with  sought-after  Web  skills,  employers  are 
starting  to  loosen  the  purse  4$^  strings. 
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A  6-Terabyte  Database  Growing  30  Percent  a  Year. 

Running  on  Microsoft  SQL  Server  2005. 


Global  telecommunications  leader  TDC  serves  customers  in  12  countries.  They  analyze 
data  from  70  disparate  systems  using  a  central  data  mart  built  on  Microsoft8  SQL 
Server™  2005  running  on  Windows  Served  2003.  See  how  at  microsoft.com/bigdata 
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IT  For  The  Way  You  Work 


YOU  CAN  MAKE  IT  HAPPEN  WITH  INSIGHT 

Certified  Systems  Engineers  ▼  Leading  Technology  ▼  Leasing  Programs 


LEXMARK  C522N  Color  Printer 

22H0050 

-  Prints  up  to  20ppm 

-  1200  x  1200  dpi  max  resolution  B/W 

-  10/100Base-TX  Ethernet  and  USB  interfaces 

-  1-year  warranty 


FUJITSU  fi-5530  C  Scanner 

PA03334-B305 

-  Quick  color  capture  up  to  47ppm/94ipm 

-  100-page  automatic  document  feeder  with 
ultrasonic  double  feed  detection 

-  Ultra  SCSI  &  USB  2.0  interface 

-  Bundled  with  Kofax  Software  VRS  4.0,  Adobe 
Acrobat  7.0  Standard  &  ScandAII  21 

-  Maximize  uptime  with  optional  ScanCare 
preventative  maintenance  service  programs 


Ricoh  Aficio  AP610N 

402338 

-Prints  up  to  35ppm 

-  1200  x  1200  dpi  max  resolution 

- 10/100  Ethernet,  high-speed  USB 
and  parallel  interfaces 

-  500-sheet  capacity 


insight.com/cw  t  800.998.8052 

AIIM  Industry  "i  tj  r  apor  on  fteccrdi,  Document  2nd 
Enterprise  Contes  tfajugomant  tor  Public  Sector,  2D05. 

Source  Code:  ADO?i 

Insight  and  the  Insight  icop  v>  registered  trademarks  of  Insight  Direct  USA,  Inc.  IT  For  The  Way  You  Work  is  a  trademark  of  Insight  Direct  USA,  Inc.  All  other 
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NEWS 


6  Companies  are  gaining  enough 
user  buy-in  for  their  business 
intelligence  systems  to  make  the 
technology  a  strategic  asset. 


8  Sun  follows  through  on  its 

promise  to  make  pieces  of 
Java  available  to  the  open-source 
community. 

8  A  health  care  provider  signs  a 
$300  million  contract  with  Al¬ 
catel  for  a  converged  IP  network. 

1£VMware  gets  more  competi- 
10  tion  from  Microsoft  and  open- 
source  virtualization  vendors 
—  and  some  of  its  users  are  glad. 


2  Global  Dispatches:  The  top 

IT  exec  at  an  Australian  TV 
network  is  resigning  following  a 
shift  of  IT  budgeting  responsibil¬ 
ity  to  the  company’s  CFO. 


MQ&A:  Bill  Hilf,  a  Microsoft  exec, 
discusses  the  vendor’s  open- 
source  plans  and  how  criticism  of 
an  agreement  to  share  technical 
info  with  Sun  helped  shape  its  re¬ 
cent  deal  with  Novell. 


MQ&A: Kevin  Kline,  who  heads 
the  user  group  for  Micro¬ 
soft’s  SQL  Server  database,  says 
most  companies  have  yet  to  make 
“a  strong  commitment”  to  the  year- 
old  SQL  Server  2005  release. 

ONLINE 

Windows  Vista  A  to  Z 

We’ve  gathered  Computerworld' s 
best  Vista  coverage,  from  in-depth, 
hands-on  reviews  to  stories  about  the 
hot  issues  surrounding  the  OS.  Check 
back  often  for  updates.  ©  www. 
computerworld.com/software 


Making  the  PC  Connection 


Consortium  for  a  Cure 


In  the  Technology  section:  New  services  such  as 
GoToMyPC  and  LogMeln  —  used  instead  of 
VPNs  —  are  making  remote  PC  access  easier  for 
IT  support  staffers  and  users  alike.  Page  30 


In  the  Technology  section:  The  National  Cancer  Institute  developed  an 
open-source,  open-access  information  network  to  speed  progress  on 
cancer  research  and  care.  The  grid  computing  project  was  named  a 
Computerworld  Honors  Program  award  winner  this  year.  Page  36 


OPINIONS 


4A  On  the  Mark:  Mark  Hall  reports 
IU  on  a  vendor  whose  software 
could  help  companies  send  out 
bills  that  treat  customers  as  more 
than  an  invoice  number. 

nn  Don  Tennant  recognizes  only 
tm U  one  way  that  chance  can  play 
a  role  in  determining  how  much 
IT  workers  are  paid:  whether  you 
were  born  male  or  female. 


AP  Michael  Gartenberg  weighs  the 
fcUpros  and  cons  of  Windows 
Vista  from  the  perspective  of  IT. 

M  Bruce  Hoard  says  you  can 
avoid  getting  ransom  notes 
from  cybercriminals  by  deploying 
robust  security  systems. 


PP  Frankly  Speaking:  Frank  Hayes 

OU  notes  that  Kaiser  Perman- 
ente  had  a  CEO,  CIO  and  project 
supervisor  who  looked  like  the 
future  of  IT.  But  they  brought  Kai¬ 
ser  what  appear  to  be  sweetheart 
deals,  coverups  and  bad  publicity. 
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Pay  raises  for  most  IT  workers  kicked  up  just  3.1% 
again  this  year,  according  to  Computerworld’s 
20th  Annual  Salary  Survey.  But  some  with  the 
hottest  Web  skills  snared  above-average  raises. 
Also,  find  select  compensation  figures  broken 
out  for  male  and  female  IT  workers.  One  IT  career 
expert  says  if  the  disparity  isn’t  corrected  soon, 
women  might  leave  the  field  in  droves. 


Opinion:  IT  workers  and  corporate  America 
recognize  that  they  need  each  other  but  aren’t 
certain  that  they’re  ready  to  trust  again  after  being 
burned,  says  columnist  Paul  Glen. 


Charts  and  Data  Points:  Find 

salary  information  for  30  IT  job  titles,  plus  data 
broken  out  by  region  and  company  size.  Also,  see 
how  we  conducted  this  year’s  survey. 


Opinion:  The  frozen  job  market  is  starting  to 
melt,  says  columnist  Johanna  Rothman.  She  of¬ 
fers  advice  for  IT  hiring  managers  starting  to  feel 
the  heat. 


ns  week,  www.computerworld.com/ 
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CIO  Resigns  From 
Kaiser  Health  Plan 


Ciiff  Dodd  resigned  last  week  as 
CIO  at  Kaiser  Foundation  Health 
Plan/Hospitals.  Bruce  Turksta, 
vice  president  and  program 
director  of  HealthConnect,  was 
named  interim  CIO.  The  com¬ 
pany  declined  to  say  whether 
the  resignation  is  related  to  a 
memo  a  Kaiser  worker  sent  to 
all  employees  that  criticized  a 
$4  billion  electronic  health  re¬ 
cords  management  system  from 
Epic  Systems  Corp.  that  was 
rolled  out  in  2004. 


Utah  Man  Pleads 
Guilty  in  Piracy  Case 

The  operator  of  a  Web  site  that 
sold  software  from  several  ven¬ 
dors  has  pleaded  guilty  to  one 
count  of  criminal  copyright  in¬ 
fringement,  said  the  U.S.  Depart¬ 
ment  of  Justice.  Ronnie  Knott  of 
Salt  Lake  City  will  be  sentenced 
Feb.  23  in  a  Virginia  federal 
court.  Knott  faces  five  years  in 
prison  and  a  $250,000  fine  for 
providing  subscriber  access  to 
software  from  Microsoft  Corp., 
Symantec  Corp.  and  others. 


Microsoft  to  Release 
Windows  Patches 

Microsoft  will  release  six  groups 
of  security  patches  tomorrow 
that  fix  flaws  in  the  Windows 
operating  system  and  the 
company’s  XML  parser.  Secu¬ 
rity  experts  said  hackers  have 
posted  code  showing  how  a  flaw 
in  the  parser  could  be  exploited 
to  run  unauthorized  programs  on 
a  PC.  Microsoft  did  not  disclose 
whether  this  flaw  will  be  fixed. 


Motorola  Buys 
Wireless  Tech  Firm 

Motorola  Inc.  has  agreed  to 
acquire  Good  Technology  Inc.,  a 
maker  of  wireless  messaging, 
handheld-security  and  data  ac¬ 
cess  products.  Terms  of  the  deal, 
expected  to  close  early  next  year, 
were  not  disclosed.  The  acquired 
firm  will  be  part  of  Motorola’s 
mobile  devices  unit.  Motorola 
currently  uses  Good’s  Mobile 
Messaging  technology  on  the 
Motorola  Q  smart  phone. 


BI  Becoming  Strategic  Corporate  Asset 


IT  must  gain  user 
buy-in,  expand 
capabilities  of 
tools,  panel  says 

BY  HEATHER  HAVENSTEIN 

SAN  FRANCISCO 

USINESS  intelligence 
technology  is  evolving 
from  a  tactical  tool  to  a 
strategic  asset  as  many 
companies  look  to  it  to  help 
bolster  enterprise  operations, 
according  to  a  panel  of  users  at 
the  Business  Objects  SA  user 
conference  here  last  week. 

But  making  that  shift  re¬ 
quires  user  buy-in  and  an  abil¬ 
ity  to  offer  BI  capabilities  to 
growing  numbers  of  workers, 
the  panel  members  agreed. 

Jim  Young,  director  of  the 
information  services  group 
at  Allstate  Insurance  Co.  in 


SAN  FRANCISCO 

BUSINESS  OBJECTS  unveiled  an 
update  to  its  business  intelligence 
tool  set  at  its  user  conference  here 
last  week. 

The  Business  Objects  XI  Re¬ 
lease  2  Productivity  Suite,  slated 
to  ship  during  the  first  half  of 
next  year,  is  designed  to  make  it 
easier  for  business  users  to  access 
analysis  and  reports  needed  to 
perform  daily  tasks.  Pricing  was 
not  disclosed. 

The  suite  will  be  available  as  an 
add-on  to  existing  XI  versions,  said 
John  Schwarz,  CEO  of  Business 
Objects.  The  updated  version  in¬ 
cludes  improved  search  capabilities, 
new  visualization  tools  and  a  faster 
online  analytical  processing  client, 
he  added.  The  new  search  capa¬ 
bilities  can  be  used  to  perform  a 
keyword  search  to  quickly  retrieve 
relevant  information  from  reports 
and  dashboards,  Schwarz  said. 

Hal  Siegel,  data  warehouse 
project  manager  at  Pratt  &  Whit¬ 
ney  Rocketdyne  Inc.  in  Canoga 
Park,  Calif.,  said  the  search  ca¬ 
pabilities  could  be  a  Poon  to  the 
company’s  300  Business  Objects 
users,  who  often  can’t  find  data 
they  are  seeking. 


Northbrook,  Ill.,  said  his  com¬ 
pany  is  looking  to  expand  its 
use  of  BI  to  employees  who 
work  directly  with  customers. 

About  33,000  Allstate  work¬ 
ers  already  use  BI  tools  from 
Business  Objects  to  detect 
and  analyze  fraud,  determine 
prices,  process  claims  and 
manage  the  insurer’s  adjuster 
workforce,  he  said. 

Now,  Allstate  is  working  to 
incorporate  BI  data  into  the 
business  processes  of  employ¬ 
ees  who  communicate  with 
customers  through  telephone 
or  online  call  centers  or  in 
person,  Young  said. 

“We’ve  got  the  data,  [and]  we 
need  to  mine  that  data  and  get 
it  into  the  hands  of  people  who 
can  make  some  good  decisions 
about  how  to  cross-sell  our 
products,”  he  said.  “Histori¬ 
cally,  we  have  done  a  great  job 


Using  the  new  search  capability, 
he  said,  “you  can  ask  a  question, 
and  no  matter  where  it  is  -  in  a 
database,  file  servers  or  anywhere 
across  the  company  -  you  can 
get  it.” 

Rocketdyne,  which  manufac¬ 
tures  rocket  engines,  uses  Busi¬ 
ness  Objects  software  to  analyze 
cost  schedules  and  to  ensure  that 
engines  are  delivered  on  schedule, 
Siegel  said. 

Jeff  Pelletier,  senior  IT  manager 
at  Cingular  Wireless  LLC  in  Atlanta, 
said  users  there  are  happy  with 
the  data  dictionaries  his  company 
created  for  the  current  Business 
Objects  version.  “We're  not  as 
comfortable  with  the  new  search 
features  coming  out,”  he  said. 

Dan  Vesset,  an  analyst  at 
market  research  company  IDC, 
said  the  new  search  tool  is  aimed 
at  allowing  Business  Objects 
users  to  find  both  BI  content 
and  external  content  using  the 
BI  tools.  However,  he  noted  that 
search  results  only  provide  a  view 
into  past  performance  "without 
support  for  evaluating  alternative 
actions  or  analyzing  the  impact 
of  a  decision.” 

-  HEATHER  HAVENSTEIN 


of  implementing  BI  somewhat 
tactically.  Now,  the  opportuni¬ 
ty  is  to  start  to  bring  together 
data  from  all  the  disparate 
parts  of  the  company.” 

Allstate  gained  user  buy-in 
for  its  new  BI  plan  after  put¬ 
ting  together  a  “road  show”  to 
let  key  IT  and  business  users 
know  how  it  would  work. 

“We  needed  to  make  sure 
there  weren’t  other  initiatives 
going  on  in  the  company  that 
would  be  derailed  by  our  proj¬ 
ect,”  Young  said.  “We  started 
to  bring  in  key  contacts  from 
different  development  groups 
and  negotiate  timelines.” 

Douglas  Chambers,  admin¬ 
istrator  of  the  Office  of  IT 
Applications  in  the  Georgia 
Department  of  Transportation 
in  Atlanta,  said  200  workers 
and  managers  at  the  agency 
are  currently  using  Business 
Objects  dashboards  to  moni¬ 
tor  ongoing  projects. 

During  the  first  part  of  2007, 
the  department  will  roll  out 
the  dashboards  to  an  addition¬ 
al  2,500  users,  he  added. 

“The  dashboards  allow 
upper  management  to  drill 
down  and  see  if  a  project  is 
in  trouble,”  Chambers  said. 
“They  can  see  exactly  what 
is  holding  that  project  up. 

[The  BI  tools]  have  made  the 
folks  at  the  DOT  much  more 
aware  of  how  . . .  they  directly 
affect  those  projects  being 
delivered.” 

Jonathan  Rothman,  director 
of  data  management  at  Emer¬ 
gency  Medical  Associates 
in  Livingston,  N.J.,  said  the 


group  practice  of  250  emer¬ 
gency  room  physicians  invest¬ 
ed  in  BI  tools  after  the  Sept.  11, 
2001,  terrorist  attacks. 

The  company  uses  the 
tools  to  identify  potential 
disease  outbreaks  based  on 
the  symptoms  of  patients  who 
come  into  hospital  emergency 
rooms  where  members  of 
the  group  practice.  “Without 
BI,  we  couldn’t  have  done  it,” 
Rothman  said. 

Nicholas  Berg,  senior 
manager  of  global  business 
intelligence  at  Seagate  Tech¬ 
nology  LLC  in  Scotts  Valley, 
Calif.,  said  his  company  now 
has  three  separate  global 
production  versions  of  Busi¬ 
ness  Objects  software  in  place 
—  including  a  system  used  at 
Maxtor  Corp.  prior  to  its  ac¬ 
quisition  by  Seagate  in  May. 

The  company  plans  to  re¬ 
place  the  separate  versions 
and  run  the  new  Release  2  of 
Business  Objects  XI  through¬ 
out  the  company  sometime 
next  year,  he  said. 

Berg  did  suggest  that  Busi¬ 
ness  Objects  add  guided  analy¬ 
sis  tools  in  a  future  version 
of  the  BI  tool  set.  Such  tools 
suggest  solutions  for  problems 
that  the  BI  software  discov¬ 
ers  —  an  important  feature 
for  companies  such  as  Seagate, 
whose  user  base  includes 
power  users  and  novices. 

“We  need  tools  [for]  that  user 
who  doesn’t  know  what  the 
next  step  is  ...  to  be  able  to 
guide  them  through  to  some 
recommended  actions,”  Berg 
said. * 


Business  Objects  Updates  BI  Suite 


NEC  LCD  Display 


How  do  you  turn  a  captive  audience  into 
a  captivated  audience? 

What  does  it  take  to  engage  the  more  than  745  million  passengers  who 
will  be  traveling  via  air  this  year?  Over  a  century  of  communications 
expertise  and  decades  of  experience  in  the  imaging  and  software  industry. 
As  a  leader  in  the  rapidly  expanding  digital  signage  market,  NEC’s  high 
resolution,  feature-rich  LCD  and  plasma  displays  offer  airports  innovative 
solutions  to  increase  both  profitability  and  efficiency.  Maximized  viewing 
capabilities.  It’s  one  more  way  NEC  empowers  people  through  innovation. 


—  www.necus.com/captivate 
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Sun  Set  to  Part  With 
Java’s  Source  Code 


Users’  reactions  mixed:  Some  welcome 
access  to  code;  others  fear  code  forking 


BY  HEATHER  HAVENSTEIN 

SUN  MICROSYSTEMS 
Inc.  this  week  is  set 
to  make  significant 
chunks  of  the  Java  lan¬ 
guage  freely  available,  making 
good  on  its  promise  in  May  to 
open  the  source  code  of  the 
technology. 

Sun  CEO  Jonathan  Schwartz 
is  slated  to  formally  announce 
the  availability  of  the  code 
today  at  the  company’s  head¬ 
quarters  in  Santa  Clara,  Calif. 
Officials  last  week  said  that 
parts  of  the  Java  Platform 
Standard  Edition  (JSE)  and 
Java  Platform  Micro  Edition 
(JME)  will  be  available  under 
the  same  GNU  General  Public 
License  used  for  the  open- 
source  Linux  operating  system 
and  the  MySQL  database. 

Sun  said  it  will  still  offer 
commercial  licenses  for  Java. 

Users  had  mixed  reactions 
to  the  move.  Some  said  they 
welcomed  the  chance  for  ad¬ 
ditional  scrutiny  of  the  source 
code.  Others  worried  that  the 
open-source  shift  could  lead 
to  the  creation  of  incompatible 
versions  of  Java  through  the 
process  known  as  code  forking. 

Alan  Flint,  systems,  applica¬ 
tions  and  programming  man¬ 
ager  at  Richmond  Wholesale, 
a  food  distributor  based  in 
Richmond,  Calif.,  said  Sun’s  de¬ 
cision  may  persuade  his  com¬ 
pany  to  use  the  programming 
language  for  the  first  time. 

“Open  source  is  an  area  I  am 
interested  in  pursuing ...  to 
have  multiple  options  and  not 
be  locked  into  proprietary  sce¬ 
narios,”  he  said.  “Everybody  in 
the  world  has  to  go  to  Microsoft 
because  they  are  so  pervasive, 
but  sometimes  you  feel  like  you 
are  painfully  being  forced  to 
do  something  that  is  not  in  the 
best  interest  of  the  company.” 

Mayur  Raichura,  director  of 
information  services  at  The 


Long  &  Foster  Companies 
Inc.  in  Fairfax,  Va.,  said  Sun’s 
open-source  move  persuaded 
the  real  estate  firm  to  evaluate 
Java  technology.  Long  &  Foster 
doesn’t  use  Java  because  of  its 
cost  and  complexity,  he  said. 

“With  Java  available  as  open 
source,  we  will  definitely  re¬ 
look  at  the  Java  option  as  a  de¬ 
velopment  platform,”  he  said. 

Boscov’s  Department  Store 
LLC  won’t  be  affected  much 
right  now  by  the  move  be¬ 
cause  the  Reading,  Pa.-based 
company  uses  other  Java- 
based  open-source  tools  like 
Red  Hat  Inc.’s  JBoss  applica¬ 


tion  server  and  BEA  Systems 
Inc.’s  JRockit  Java  virtual 
machine  for  development,  said 
Joe  Poole,  manager  of  techni¬ 
cal  support.  “The  big  impact 
will  occur  in  the  future,  when 
Java  specifications  won’t  be 
written  by  Sun  alone  and  the 
runtime  environments  should 
be  more  compatible”  with  non- 
Sun  software,  Poole  said. 

T.N.  Subramaniam,  direc¬ 
tor  of  technology  at  RouteOne 
LLC  in  Farmington  Hills, 
Mich.,  said  he  was  never 
among  those  Java  users  clam¬ 
oring  for  Sun  to  open  the 
source  code.  “I  have  concerns 
that  this  may  fragment  [Java],” 
he  said.  Subramaniam  said  that 
RouteOne  —  a  joint  venture  of 
the  finance  arms  of  Daimler- 


Everybody  in 
the  world  has 
to  go  to  Microsoft 
because  they  are 
so  pervasive,  but 
sometimes  you  feel 
like  you  are  painfully 
being  forced  to  do 
something  that  is  not 
in  the  best  interest  of 
the  company. 

ALAN  FLINT,  SYSTEMS. 
APPLICATIONS  AND 
PROGRAMMING  MANAGER, 
RICHMOND  WHOLESALE 


Chrysler  AG,  Ford  Motor  Co., 
General  Motors  Corp.  and 
Toyota  Motor  Corp.  —  will 
likely  remain  a  Java  shop. 

He  noted  that  RouteOne  is 
moving  away  from  using  Java 
in  its  service-oriented  architec¬ 
ture  in  favor  of  native  XML. 

John  Muhlner,  Sun’s  Java 
ME  product  marketing  man¬ 


ager,  said  the  move  to  open 
source  means  developers  can 
“influence  the  direction  we’re 
taking  the  platform.” 

The  Java  components  that 
Sun  is  making  available  as 
open  source  this  week  are 
the  Java  Compiler  and  the 
Java  HotSpot  virtual  machine, 
which  makes  up  the  Java  Soft¬ 
ware  Development  Kit  in  JSE 
and  the  core  implementation 
of  JME  found  on  most  mobile 
handsets.  Additional  pieces  of 
JSE  and  JME  will  be  available 
under  open-source  licenses 
later  this  year  and  in  the 
spring  of  2007,  Sun  said. 

Michael  Goulde,  an  analyst 
at  Forrester  Research  Inc.,  not¬ 
ed  that  even  though  the  code 
will  be  available  as  open  source, 
Sun  —  not  an  independent  or¬ 
ganization  —  will  control  Java. 
“Not  only  will  Sun  still  manage 
the  open-source  project . . . 
[but]  it  still  has  control  of  the 
Java  Community  Process,”  he 
said.  “It  is  not  a  completely 
vendor-neutral  effort.”  * 


Pa.  Health  System  Moves  to  Simplify  Network  Sprawl 


BY  MATT  HAMBLEN 

The  University  of  Pittsburgh 
Medical  Center  last  week  said 
it  has  signed  a  $300  million 
contract  with  Alcatel  to  help 
it  develop  an  IP  network  that 
supports  voice,  data  and  video 
communications  via  wired 
and  wireless  connections. 

According  to  UPMC  of¬ 
ficials,  the  converged  network 
will  replace  existing  data  net¬ 
works  that  are  based  on  equip¬ 
ment  from  Cisco  Systems 
Inc.  as  well  as  myriad  voice 
systems  running  on  switches 
from  four  vendors. 

Work  on  the  convergence 
project  is  scheduled  to  start 
early  next  year,  and  Alca¬ 
tel  said  it  expects  to  finish 
deploying  the  new  network 
within  four  years.  But  neither 
Alcatel  nor  the  UPMC  would 
say  how  long  the  contract  will 
run  for,  describing  it  only  as  a 
multiyear  deal. 

The  UPMC  operates  19  hos¬ 
pitals  and  about  400  doctors 
offices  and  other  outpatient 
sites,  and  it  has  43,000  work¬ 
ers  —  making  it  the  largest 
employer  in  western  Penn¬ 


sylvania.  But  Bill  Hanna,  the 
health  care  system’s  vice  presi¬ 
dent  of  IT  infrastructure,  said 
the  UPMC’s  sprawling  organi¬ 
zation  has  left  it  with  a  patch- 
work  of  more  than  150  voice 
switches  and  30  voice-mail 
systems,  plus  25  call  centers. 

Consolidation  Key 

As  part  of  the  convergence 
project,  UPMC  officials  hope 
to  reduce  the  current  setup  to 
a  single  voice-mail  system  and 
one  call  center,  Hanna  said. 

He  added  that  it  isn’t  clear  how 
many  IP-based  switches  will 
have  to  be  installed  to  sup¬ 
port  the  new  network.  And 
although  he  predicted  that 
the  convergence  work  will  re¬ 
sult  in  lower  networking  costs, 


he  couldn’t  say  by  how 
much. 

Hanna  said  the 
core  network  will  be 
based  on  technologies 
usually  reserved  for 
telecommunications 
companies,  including 
carrier-class  routers 
and  Dense  Wave¬ 
length  Division  Multi¬ 
plexing  technology  operating 
over  fiber-optic  cabling.  “It 
will  be  very  high  performance 
—  not  what  you’d  typically 
see  in  an  organization’s  net¬ 
work,  especially  in  health 
care,”  he  said. 

Nancy  Landman,  the 
UPMC’s  vice  president  of  busi¬ 
ness  development  and  IT  op¬ 
erations,  said  Alcatel  beat  out 
rival  vendors  such  as  Nortel 
Networks  Corp.  and  Avaya  Inc. 
partly  because  the  health  care 
system  felt  that  Alcatel  would 
act  more  as  a  long-term  partner 
than  as  a  traditional  vendor. 

For  example,  the  deal  calls 
for  the  UPMC  and  Alcatel  to 
each  invest  $25  million  in  a 
joint  venture  that  will  develop 
health  care  applications  and 


technologies.  They  said  they 
initially  will  focus  on  products 
that  enable  health  care  pro¬ 
viders,  emergency  response 
workers  and  other  parties  to 
share  information  during 
public-safety  crises,  such  as  a 
pandemic  or  terrorist  attack. 

Hanna  said  Alcatel  also 
embraced  the  idea  of  support¬ 
ing  a  hybrid  network  of  digital, 
analog  and  IP-based  phones, 
something  Cisco  couldn’t  do. 

Brian  Riggs,  an  analyst  at 
Current  Analysis  Inc.  in  Ster¬ 
ling,  Va.,  said  the  UPMC  proj¬ 
ect  gives  Paris-based  Alcatel  a 
big  foothold  in  the  U.S.,  where 
it  has  struggled  to  win  custom¬ 
ers  for  many  years. 

“The  UPMC  told  me  they 
didn’t  want  to  deal  with  mul¬ 
tiple  vendors,”  Riggs  said.  “But 
to  have  an  organization  that’s 
ripping  out  Cisco  and  replac¬ 
ing  it  with  Alcatel  is  a  big  deal. 
It’s  a  lot  of  trust  in  Alcatel.” 

The  UPMC  has  already  in¬ 
stalled  several  thousand  wire¬ 
less  access  points,  and  that 
amount  is  expected  to  grow 
to  about  30,000  as  part  of  the 
convergence  project.  » 
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Microsoft  Probes 
ActiveX  Defect 


Microsoft  Corp.  is  investigat¬ 
ing  reports  of  a  vulnerability 
in  a  Windows  ActiveX  control 
that  could  allow  an  attacker  to 
remotely  control  a  computer. 
One  security  company  rated  the 
flaw  critical,  but  Microsoft  said 
it  allowed  only  limited  attacks. 
The  vulnerability,  which  is  not 
patched  yet,  affects  Windows 
2000  Service  Pack  4,  Windows 
XP  Service  Pack  2,  Windows 
Server  2003  and  Windows 
Server  2003  Service  Pack  1. 


Firefox  1.5  Support 
To  End  April  24 

Mozilla  Corp.  said  it  will  stop  is¬ 
suing  security  and  stability  fixes 
for  the  open-source  Firefox  1.5 
browser  on  April  24.  The  compa¬ 
ny  recommended  that  users  up¬ 
grade  to  Firefox  1.5.0.8  by  that 
date.  The  new  version  includes 
software  that  will  eventually  al¬ 
low  Mozilla  to  push  out  Version  2 
of  the  browser  via  Firefox’s  auto¬ 
matic  update  mechanism. 


HP  Charges  InkTec 
With  Patent  Breach 

Hewlett-Packard  Co.  has  filed  a 
complaint  against  the  German 
subsidiary  of  InkTec  Co.  for  vio¬ 
lating  HP’s  printer  ink  patents. 
The  complaint,  filed  in  a  Ger¬ 
man  court,  alleges  that  InkTec- 
branded,  do-it-yourself  cartridge 
refill  kits  violate  HP  patents.  HP 
said  the  alleged  violations  were 
found  because  of  ongoing  testing 
and  enforcement  efforts  within 
the  supplies  unit  of  HP’s  imaging 
and  printing  group. 


BEA  Adds  Bundled 
S0A  Offering 

BEA  Systems  Inc.  has  an¬ 
nounced  its  first  package  of 
Enterprise  Integration  Portfolio 
tools,  which  are  designed  to  help 
users  during  different  stages 
of  their  SOA  deployments.  The 
offering  includes  the  existing 
WebLogic  Integration  9.2  and 
AquaLcgic  Service  Bus  2.6 
products  and  the  new  AquaLogic 
Integrator  tool.  BEA  did  not  dis¬ 
close  pricing  for  the  package. 


[ON  THE  MARK 


HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  BUZZ  BY  MARK  HALL 


Documents  Tell 
Your  Customers . . . 

. . .  what  you  think  of  them  -  which  isn’t  much,  it  seems. 

Chris  Stone,  CEO  of  StreamServe  Inc.,  laments  that 
IT  managers  are  missing  an  opportunity  to  help  their 
companies  improve  customer  relations  every  time  in¬ 
voices,  lease  documents  and  other  papers  are  printed. 


“It’s  amazing 
how  much 
business  rela¬ 
tionship  mail 
is  junk  mail,” 
Stone  says. 
Take  a  peek 
at  most  bills 
from  big  cor¬ 
porations,  and 
you’ll  see  that 
the  paperwork  is  designed  for 
the  business  and  not  its  cus¬ 
tomers,  he  contends.  “We’re 
just  a  number  on  an  invoice,” 
Stone  says.  But  he  claims  that 
his  company’s  Persuasion 
software  lets  you  design  read¬ 
able  customer  documents  and 
customize  them  for  people 
other  than  your  CFO.  You  can 
even  add  marketing  materials 
such  as  info  about  new  cars 
for  customers  whose  auto 
leases  are 
expiring.  A 
version  of  Per¬ 
suasion  that 
supports  Web 
services  and 
has  a  revised 


user  interface  will  ship  next 
month,  Stone  says.  It  will  also 
support  applications  built  on 
top  of  SQL  Server,  DB2,  SAP 
NetWeaver  and  IBM’s  FileNet 
technology. 

Live  video  is 
becoming  a  vital . . . 

. . .  business  service.  So  says 
Andy  Howard,  director  of 
marketing  at  VBrick  Systems 
Inc.  He  claims  that  compa¬ 
nies  are  ratcheting  up  their 
use  of  video  for  applications 
such  as  monitoring  offshore 
oil  platforms  or  enabling 
CEOs  to  explain  Page  One 
scandals  to  their  employees. 
To  help,  VBrick  in  the  first 
quarter  plans  to  ship  a  video 


The  VBrick  appliance  can  digitize 
video  feeds  for  WAN  transmissions. 


encoder  appliance  with  inte¬ 
grated  management  software 
from  Media  Publisher  Inc.  Af¬ 
ter  it’s  been  installed  centrally 
and  at  remote  locations,  the 
appliance  can  digitize,  com¬ 
press  and  decompress  video 
feeds  for  WAN  transmissions. 
Media  Publisher  CEO  Rod 
Bacon  says  massive  video 
broadcasts  of  events  to  PCs 
will  be  possible.  “We  all  see 
that  having  large-scale  events 
is  the  golden  chalice,”  he  says. 
The  goal  is  100,000-plus  seats. 
“That’s  pretty  challenging,” 
admits  Howard  —  especially 
over  a  WAN. 

The  history  of  USB 
ports  on  your . . . 

. . .  network  can  now  be  revealed. 

Later  this  week,  SecureWave 
SA  will  release  a  security  util¬ 
ity  called  Device  Scanner  to 
partners  who  sell  its  endpoint 
security  tools.  Although  a  visit 
from  a  value-added  reseller 
(VAR)  may  not  be  the  most 
charming  part  of  your  day,  be¬ 
ing  able  to  run  Device  Scanner 
on  your  network  may  just  win 
you  over.  Dee  Liebenstein,  Se- 
cureWave’s  U.S.-based  direc¬ 
tor  of  product  marketing,  says 
the  software  can  document 
the  history  of  everything  that 
has  been  connected  to  your 
Windows  PCs  and  servers  via 
USB  ports  as  well  as  FireWire 
and  wireless  links.  You’ll  learn 
who  has  been  attaching  what 
and  how  often,  which  could 
help  you  find  potential  secu¬ 
rity  policy  problems.  Best  of 
all,  the  utility  is  free  —  except 
for  the  time  you  have  to  spend 
with  the  VAR. 

Get  free  reporting 
tools  for . . . 

. . .  IBM’s  free  database.  No  VAR 

drop-ins  are  necessary  with 
IntelliView  Designer  and  Re¬ 
port  Analyzer, 
a  pair  of  free  re¬ 
porting  tools 
developed  by 
Synaptris  Inc. 
for  IBM’s  free 
DB2  Express-C 


database.  Better  still,  “there’s 
no  scripting,  no  coding,” 
claims  Synaptris  CEO  Madan 
Kumar.  “Everything  is  drag 
and  drop.”  According  to  Ku¬ 
mar,  you  can  easily  design 
graphical  or 
data-driven 
reports  with 
up  to  a  mil¬ 
lion  rows  of 
data.  Synap¬ 
tris  charges 
for  training,  a 
software  development  kit  and 
a  portal  version  of  IntelliView. 
But  if  the  tools  are  so  easy  to 
use,  you  may  not  need  those 
extras.  The  software  is  in 
beta  now  and  is  scheduled  for 
general  release  next  month. 

Logical  and  physical 
security  meet . . , 

. . .  in  the  halls  of  government.  As 

most  federal  agencies  scram¬ 
ble  to  comply  with  a  smart  ID 
card  directive  issued  by  Pres¬ 
ident  Bush  in  2004,  vendors 
such  as  Tyco  International 
Ltd.  stand  ready  to  help.  Peter 
Boriskin,  director  of  product 
management  for  access  con¬ 
trol  at  Tyco,  says  the  company 
next  month  plans  to  ship 
Java-based  personal  identity 
verification  (PIV)  cards  that 
meet  the  Federal  Information 
Processing  Standard  (FIPS) 
201.  Agencies  need  to  issue 
PIV  cards  containing  digital 
certificates 
and  biometric 
data  to  all  em¬ 
ployees  and 
contractors 
by  September 
2008  in  order 
to  secure 
access  to  IT 
systems  and 
government 
buildings.  Tyco’s  cards  will 
do  that,  working  with  the 
company’s  Secure  9000  event 
management  system,  Boriskin 
says.  The  combined  offering 
is  due  on  Dec.  22,  ahead  of  a 
January  deadline  for  fielding 
PIV  systems  that  meet  the 
FIPS  201  specs.  * 
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LONDON  STOCK  EXCHANGE  CHOOSES 
WINDOWS  OVER  LINUX  FOR  RELIABILITY 


Torn  Nagy  for  The  Highly  Reliable  Times 


THE  HEADQUARTERS  BUILDING  of  the  London  Stock 
Exchange,  located  in  London’s  Paternoster  Square. 


Reliability  Is  Key  in  the 
“World’s  Capital  Market” 


By  MICHAEL  BETTENDORF 


LONDON,  Oct.  2006  — 
When  an  IT  system  must 
process  15  million  real-time 
messages  per  day.  with  peaks 
at  2,000  messages  per  second, 
even  one  second  of  downtime 
counts.  That’s  the  pressure 
the  London  Stock  Exchange 
faced  when  building  Infolect, 
the  Exchange’s  real-time 
stock-ticker  information  de¬ 
livery  system. 

The  solution  had  to  have 
rock-solid  reliability,  nothing 
less.  “Reliability  is  one  of  the 
key  attributes  of  the  Exchange 
in  its  technology  systems. 
These  systems  have  to  work 
every  day,  24/7,  to  make  sure 
the  markets  are  there,”  said 
CIO  David  Lester,  who  evalu¬ 
ated  both  Linux  and  Micro¬ 
soft®  Windows  Server®  2003 
for  the  Exchange’s  core  tech¬ 


nology  systems.  “We  looked 
at  a  number  of  different  plat¬ 
forms  for  our  Technology 
Roadmap,  and  we  lined  up 
our  business  requirements 
with  the  capabilities  of  those 
platforms,  and  Windows 
Server  was  the  clear  choice.” 

In  Lester’s  view,  long¬ 
term  reliability  is  a  function 
of  a  solid  relationship:  “We 
wanted  a  deep  partnership 
with  an  organization  that 
could  deliver  the  kind  of 
mission-critical  technology 
that  we  needed,  and  we  felt 
Microsoft  delivered  just  that.” 

For  the  full  London  Stock 
Exchange  case  study,  plus 
other  case  studies  and  inde¬ 
pendent  research  findings  on 
the  reliability  of  Windows 
Server  versus  Linux,  visit  us 
at  microsoft.com/getthefacts 


LESTER  SPEAKS  OUT: 

“We  looked  at  a  number  of  different 
platforms  for  our  Technology  Roadmap, 
and  we  lined  up  our  business  require¬ 
ments  with  the  capabilities  of  those 
platforms,  and  Windows  Server  was 
the  clear  choice." 

-David  Lester,  CIO, 

London  Stock  Exchange 

•<i  ..... 


BREAKING  NEWS: 

London  Stock  Exchange  Achieves 
Record  Reliability 

David  Lester,  Chief  Information  Officer  of  the  London  Stock 
Exchange,  cites  Windows  Server  as  key  to  maintaining  system 
reliability  and  performance.  —  Continued  on  Page  S3. 
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NTP  Files  Lawsuit 
Against  Palm 

NIP  inc.  filed  a  patent  infringe¬ 
ment  lawsuit  against  Palm  Inc. 
The  suit  is  similar  to  an  earlier 
one  that  the  patent-holding  firm 
filed  against  Research  In  Motion 
Ltd.  that  nearly  shut  down  RIM's 
BlackBerry  service.  The  new 
lawsuit,  filed  in  a  Virginia  federal 
court,  alleges  that  Palm  is  using 
NTP  technology  in  its  mobile 
wireless  e-mail  devices.  It  seeks 
to  stop  Palm  from  selling  and  op¬ 
erating  such  products.  In  March, 
RIM  agreed  to  pay  $612.5  million 
to  settle  NTP’s  patent  claims. 

Office  ’07  Released 
To  Manufacturers 

Microsoft  Corp.  has  released  the 
system  code  for  Office  2007  to 
manufacturing.  Customers  in 
Canada  and  the  U.S.  can  start 
downloading  Office  2007  on 
Dec.  1,  one  day  after  the  com¬ 
pany  plans  to  officially  launch 
the  updated  suite  along  with 
Windows  Vista  and  the  Exchange 
Server  2007  communications 
software  at  an  event  in  New  York. 

Duffield  Firm  Unveils 
First  ERP  Suite 

Workday  Inc.,  PeopleSoft  co¬ 
founder  Dave  Duffield’s  latest 
venture,  has  unveiled  the  first 
of  four  planned  on-demand  ERP 
suites.  The  new  Workday  Human 
Capital  Management  is  already 
deployed  at  two  companies: 
multichannel  customer  service 
firm  Kana  Software  Inc.  and  Bi¬ 
osite  Inc.,  a  biotechnology  com¬ 
pany.  Workday  plans  to  bring  out 
on-demand  suites  of  financial, 
resource  and  revenue  manage¬ 
ment  software  next  year. 

HP  Closes  $4.5B 
Mercury  Acquisition 

After  extending  its  offer  four 
times,  Hewlett-Packard  Co.  has 
finally  completed  its  $4.5  billion 
purchase  of  Mercury  Interactive 
Cor;;  Mercury  is  now  a  wholly 
owned  HP  subsidiary.  HP  will  un¬ 
veil  its  plans  for  Mercury’s  appli¬ 
cation  management  technologies 
at  its  Software  Universe  customer 
event  in  Geneva  next  month. 
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and  Pennsylvania. 

For  example,  some  early 
voters  in  Florida’s  Broward 
and  Miami-Dade  counties 
reported  difficulties  getting 
the  touch-screen  systems  to 
display  the  candidates  they 
voted  for.  A  spokeswoman  for 
Florida  Secretary  of  State  Sue 
Cobb  downplayed  the 
reports  of  machine  mal¬ 
functions,  which  she 
said  were  isolated  and 
caused  mostly  by  poll 
worker  errors. 

Holly  Jacobson,  co¬ 
director  of  Voter  Action, 
a  nonprofit  election 
watchdog  organization 
in  Berkeley,  Calif.,  con¬ 
tended  that  the  early 
reports  of  few  problems 
with  e-voting  machines 
were  misleading. 

“Although  I  heard  reports 
that  for  the  most  part  things 
went  smoothly,  that  doesn’t 
seem  to  be  the  experience  of 
many  voters  —  particularly 
in  Maryland,  Pennsylvania, 
Florida,  Ohio,  Colorado,  San 
Diego  County  and  elsewhere,” 
she  said. 

“Reading  through  these  re¬ 
ports  really  does  give  a  tragic 
view  of  the  voting  experience 
for  many,”  Jacobson  added. 

For  instance,  in  Ohio,  43  of 
Cuyahoga  County’s  573  polling 
places  had  machine  problems 
that  affected  voters  last  week, 
according  to  Alan  Melamed, 
a  spokesman  for  the  county’s 
board  of  elections.  At  eight  of 
those  sites,  voters  had  to  use 
paper  ballots  because  of  faulty 
hardware. 

‘No  Big  Deal’ 

Joseph  Demma,  chief  of  staff 
for  Utah  Lt.  Gov.  Gary  Hebert, 
whose  office  oversees  elec¬ 
tions  in  that  state,  said  voters 
in  Utah  County  encountered 
some  problems  with  Diebold 
Election  Systems  TSX  touch¬ 
screen  systems  during  last 
week’s  election. 

He  said  that  delays  in  pre¬ 
paring  encoders,  which  pro¬ 
gram  specific  ballots,  caused 
some  machines  to  be  unavail¬ 
able  at  the  start  of  voting. 


AVI  RUBIN 

says  he  still 
opposes 
e-voting, 
although  the 
machines’ 
performance 
has  improved. 


However,  Demma  said  it  was 
‘no  big  deal,”  noting  that  peo¬ 
ple  who  couldn’t  vote  on  those 
machines  used  paper  ballots 
until  the  machines  were  up 
and  running. 

Through  late  last  week, 
there  were  no  reports  of  signif¬ 
icant  meltdowns  or  hacks  that 
could  tip  a  major  race,  accord¬ 
ing  to  officials  and  e-voting 
critics  who  closely  watched 
races  in  several  states. 

Until  all  results  are 
reported  and  certified, 
and  the  performance 
of  e-voting  hardware 
is  more  completely  as¬ 
sessed,  it’s  difficult  to 
judge  how  well  the  DRE 
touch-screen  systems 
held  up,  said  several 
observers.  Election  Data 
Services  Inc.,  a  consult¬ 
ing  firm  in  Washington, 
projected  that  as  many 
as  38%  of  registered  vot¬ 
ers  across  the  country  could 
use  the  touch-screen  systems 
to  vote  in  the  election. 

“What  we  do  know  from  [the 
election]  is  that  the  rollout  of 
the  new  systems  represented 
an  enormous  change  for  many 
officials  and  poll  workers  —  in 
many  cases,  in  a  last-minute 
rush,”  said  Justin  Levitt,  coun- 
' 


r 
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Overall,  [the  e-voting 
process]  was  a  huge 
success  in  Utah.  We  are 
extremely  pleased. 

JOSEPH  DEMMA,  CHIEF  OF  STAFF 
FOR  UTAH  LT.  60V.  GARY  HEBERT 


sel  for  the  democracy  program 
at  the  Brennan  Center  for  Jus¬ 
tice  at  the  New  York  Univer¬ 
sity  School  of  Law. 

Levitt  said  that  while  the 
number  of  affected  machines 
appears  to  be  low  nationwide, 
the  number  of  problems  is 
still  higher  than  it  should  be. 
“Many  precincts  were  simply 
unprepared  to  deal  with  ser¬ 
vicing  the  number  of  voters 
arriving  at  the  polls,”  he  said. 
“The  user  experience  suffered 
as  a  result.” 

Positive  Perspective 

Despite  a  few  glitches,  top 
election  officials  in  several 
states,  including  Texas,  Mary¬ 
land,  Florida,  Utah  and  Alaska, 
said  after  the  election  that  the 
electronic  voting  gear  in  their 
states  worked  well. 

“Overall,  [the  e-voting  proc¬ 
ess]  was  a  huge  success  in 
Utah,”  said  Demma.  “We  are 


extremely  pleased.” 

In  the  days  after  the  elec¬ 
tion,  vendors  of  e-voting  ma¬ 
chines  were  upbeat  about  the 
performance  of  their  products, 
and  they  maintained  that  vot¬ 
ers  are  getting  used  to  the 
technology. 

“Our  customers  did  a  great 
job,”  said  a  spokeswoman 
for  Sequoia  Voting  Systems 
Inc.  The  Oakland,  Calif.- 
based  maker  of  optical-scan 
and  DRE  machines  claims 
a  nationwide  installed  base 
of  some  100,000  units.  “As 
we  predicted,  things  went 
smoother  this  November  than 
they  did  in  the  primaries 
[earlier]  this  year  because  the 
officials,  poll  workers  and  vot¬ 
ers  have  had  more  exposure  to 
them,”  she  said. 

DRE  critic  and  blogger  Brad 
Friedman,  founder  of  voter  ac¬ 
tivist  group  Velvet  Revolution, 
Continued  on  page  14 


Critics  Split  on  Whether  to  Abandon  DREs 


E-VOTING  CRITICS  mostly  agree 
that  touch-screen  voting  systems 
have  serious  flaws,  but  many  dis¬ 
agree  on  whether  such  machines 
should  be  abandoned. 

For  example,  Michael  Shamos, 
a  professor  who  specializes  in 
e-voting  issues  at  Carnegie  Mel¬ 
lon  University,  said  that  although 
DRE  touch-screen  systems  have 
problems  today,  their  ease  of  use 
and  other  qualities  make  them 
worth  fixing. 

Shamos  called  on  vendors  to 
“make  more-reliable  equipment”  so 
the  technology  can  safely  be  used 
in  elections. 

On  the  other  hand,  several  critics 
urged  that  touch-screen  machines 
no  longer  be  used  in  polling  places 
and  called  on  election  officials  to 
use  only  optical  scan  systems. 

Avi  Rubin,  an  elections  judge  in 
Maryland’s  Baltimore  County  and 


a  professor  of  computer  science 
at  Johns  Hopkins  University,  sug¬ 
gested  that  elections  officials  use 
only  optical  scan  technology. 

Rubin  indicated  that  although  the 
performance  of  Diebold  Election 
Systems'  TS  touch-screen  systems 
in  his  precinct  had  improved  con¬ 
siderably  since  the  primary  election 
in  September,  he  still  contends  that 
the  technology  remains  insecure. 
“Unfortunately,  I  believe  there  are 
an  unimaginable  number  of  prob¬ 
lems  that  could  crop  up  with  these 
machines,"  he  said  in  a  blog  on  his 
Web  site. 

Rubin  suggested  that  Maryland 
move  completely  to  optical  scan 
voting  technology  before  the  2008 
election. 

Bruce  Schneier,  an  author  and 
chief  technology  officer  at  Counter¬ 
pane  Internet  Security  Inc.,  agreed 
that  optical  scan  hardware  is  the 


safest  e-voting  technology. 

“No  voting  system  is  perfect, 
but  optical  scan  voting  is  the  most 
accurate,  reliable  and  secure 
system  we  have,”  he  said.  Schneier 
noted  that  such  systems  are  used 
without  problems  in  his  home  state 
of  Minnesota. 

Justin  Levitt,  counsel  for  the 
Democracy  Program  at  the  Brennan 
Center  for  Justice  at  the  New  York 
University  School  of  Law,  which 
follows  voting  technology  issues, 
said  it’s  too  early  to  give  up  on  DRE 
technology. 

“Just  as  we  shouldn’t  have 
rushed  to  put  new  [e-voting] 
systems  in  place,  we  should  not  be 
rushing  to  take  them  out  of  com¬ 
mission,”  he  said.  “It’s  way  too  early 
to  be  making  blanket  statements 
about  the  merits  of  e-voting  as  a 
whole.” 

-  MARC  L.  S0N6INI 
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Vote  Flipping’  Is  Real,  but  Its 
Cause  Is  the  Subject  of  Debate 


Some  blame 
machines;  others 
say  it’s  voter  error 

BY  TODD  R.  WEISS 

Before  and  during  last 
week’s  midterm  elec¬ 
tions,  reports  emerged 
that  “vote  flipping” 

—  where  a  voter  selects  a 
candidate  using  e-voting  hard¬ 
ware  and  the  machine  counts 
the  vote  for  another  candidate 
—  had  occurred  in  some  states. 

For  example,  voters  in  both 
Broward  and  nearby  Miami- 
Dade  County  in  Florida  had 
complained  of  vote  flipping 
during  early  voting,  though  lo¬ 
cal  elections  officials  assured 
the  public  that  no  votes  were 
changed. 

Such  problems  have  been  re¬ 
ported  in  U.S.  elections  since 
2004,  when  states  started  a 
push  to  use  electronic  voting 
machines.  The  goal  of  e-voting 
was  to  improve  the  accuracy 
of  elections.  Instead,  for  many 
voters,  the  change  has  prompt¬ 
ed  suspicions  that  votes  aren’t 
being  correctly  counted. 

Despite  e-voting  critics’ 
fears  that  vote  flipping  is 
caused  by  flaws  in  the  ma¬ 
chines,  others  say  that  such 


problems  can  be  caused  by 
user  error,  machine  calibra¬ 
tion  problems  or  other  factors. 

Stanford  University  com¬ 
puter  science  professor  David 
L.  Dill,  who  founded  the  non¬ 
profit  Verified  Voting  Founda¬ 
tion  and  VerifiedVoting.org, 
both  based  in  San  Francisco, 
last  week  called  for  investiga¬ 
tions  to  determine  the  cause  of 
vote-flipping  incidents. 

“People  have  been  way  too 
quick  to  diagnose  the  prob¬ 
lem,”  Dill  said.  “It  could  be  a 
calibration  problem  with  touch 
screens,  but  I’m  not  sure  that 
anyone  really  knows  because 
no  one’s  looked  at  it.  I  want 
facts . . .  and  all  I’ve  heard  for 
two  years  is  speculation.” 

Dill  rejected  one  theory: 
that  the  problem  is  a  conspir¬ 
acy  to  defraud  voters  of  their 
votes  and  give  the  election  to 
the  opposition.  Once  a  voter 
picks  a  candidate,  a  review 
screen  shows  who  they  voted 
for.  “It  seems  to  me  if  you  were 
trying  to  commit  fraud,  you 
wouldn’t  show  [the  ballot]  to 
the  voter,”  he  said. 

Dill  said  the  problem  could 
be  caused  by  voter  error,  per¬ 
haps  by  accidentally  touching 
a  screen  and  erroneously  mak¬ 
ing  a  selection.  He  suggested 


r  .  The  fundamental  problem 

A  with  any  touch  screen  is 
that  calibration  matters,  that 
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that  a  panel  of  experts  be 
formed  to  investigate  the  issue 
and  determine  how  to  fix  any 
problems  and  get  fixes  to  vot¬ 
ing  officials. 

Contributing  Factors 

Ted  Selker,  co-director  of  the 
Voting  Technology  Project  be¬ 
ing  conducted  by  the  Califor¬ 
nia  Institute  of  Technology  and 
MIT,  has  one  explanation  for 
such  incidents:  sloppy  voters. 
Experiments  by  the  research¬ 
ers  have  found  that  voters 
incorrectly  choose  a  candidate 
on  their  ballots  one  in  30  times, 
even  under  laboratory  settings. 
“People  are  just  sloppy  and 
make  mistakes,”  Selker  said. 

Though  voters  may  believe 
such  problems  are  caused  by 
e-voting  machines,  Selker  said 
the  actual  cause  may  be  simply 
how  voters  use  e-voting  hard¬ 
ware.  For  example,  he  said 


voters  often  try  to  drag  a  finger 
across  a  selection  on  touch 
screens  that  are  designed  for 
tapping.  “Vote  flipping  is  a 
user-interface  problem,”  not  a 
technical  flaw,  he  said. 

Machine  calibration  can 
be  a  problem  because  the 
units  are  sensitive  to  inputs 
based  on  a  user’s  height  and 
other  factors,  he  said.  Better 
machine  designs  and  simpler 
voter-selection  processes 
would  help  fix  any  problems, 
said  Selker,  an  associate  pro¬ 
fessor  of  media  arts  and  sci¬ 
ences  at  MIT  who  has  done 
extensive  research  on  product 
design  and  human  interfaces. 

Avi  Rubin,  a  professor  of 
computer  science  at  Johns 
Hopkins  University  in  Balti¬ 
more  and  director  of  ACCU¬ 
RATE,  an  election  research 
center,  said  the  only  way  to 
be  safe  from  vote  flipping 
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said  that  e-voting  machine 
breakdowns  forced  the  use  of 
paper  ballots  in  many  loca¬ 
tions  across  the  U.S. 

For  instance,  in  Denver, 
problems  with  homegrown 
e-poll  books,  which  control 
access  to  machines,  forced 
voters  to  use  paper  ballots 
for  a  period  in  the  morn¬ 
ing.  The  problem  prompted 
the  Colorado  Democratic 
Party  to  unsuccessfully  seek 
a  two-hour  extension  to  poll¬ 
ing  hours  in  Denver  District 
Court 


Meanwhile,  Avi  Rubin,  an 
elections  judge  in  Maryland’s 
Baltimore  County  and  a  pro¬ 
fessor  of  computer  science  at 
Johns  Hopkins  University,  said 
the  performance  of  e-voting 
technology  in  his  precinct  had 
improved  considerably  since 
the  September  primary. 

In  last  week’s  election, 

Rubin  said,  there  was  only 
one  serious  glitch  in  a  single 
Diebold  TS  touch-screen  vot¬ 
ing  machine  in  his  precinct.  In 
a  blog  on  his  Web  site,  Rubin 
noted  that  the  e-poll  books 
used  with  the  Diebold  ma¬ 
chines  by  the  precinct,  which 
had  caused  considerable 
problems  during  the  primary, 


“worked  flawlessly”  in  the  gen¬ 
eral  election. 

Nevertheless,  he  said  he 
remains  opposed  to  the  use  of 
DREs  because  he  believes  that 
they  still  lack  adequate  secu¬ 
rity  measures.  (See  “Critics 
Split  on  Whether  to  Abandon 
DREs,”  page  12.) 

Despite  the  apparent  lack 
of  major  problems  last  week, 
e-voting  critics  urged  that  the 
technology  continue  to  be 
closely  monitored. 

This  year’s  scrutiny  by 
media  outlets,  which  detailed 
potential  problems,  may  have 
headed  off  hacking  attempts 
that  could  have  affected  the 
results  of  a  major  race,  said 


Bruce  Funk,  the  former  elec¬ 
tions  director  for  Emery 
County,  Utah,  and  an  out¬ 
spoken  critic  of  touch-screen 
systems. 

Funk  called  for  improved 
audits  of  election  results  and 
said  that  paper  ballots  should 
be  issued  to  people  who  re¬ 
quest  them. 

“It’s  [the]  2008  [election] 
that  worries  me  the  most,”  he 
said,  adding  that  the  apparent 
lack  of  problems  in  last  week’s 
election  “only  lessens  the  pub¬ 
lic  concern  over  the  real  secu¬ 
rity  problem  that  still  exists.” » 

Computerworld’s  Todd  R. 
Weiss  contributed  to  this  story. 


is  to  have  paper  records  of 
every  ballot  cast.  “My  big 
worry  is  that  we  cannot  ever 
say  conclusively  whether  or 
not  it  happens”  as  a  result 
of  software  glitches,  tainted 
code,  machine  rigging  or  other 
tampering  if  there  is  no  paper 
record,  he  said. 

Paper  records  also  allow  re¬ 
counts  in  the  case  of  a  disput¬ 
ed  result,  Rubin  noted,  adding 
that  “without  them,  recounts 
are  impossible.” 

Dan  Wallach,  an  associate 
professor  of  computer  science 
at  Rice  University  and  an 
associate  director  of  ACCU¬ 
RATE,  said  vote  flipping  has 
been  a  recurrent  problem  in 
recent  elections  but  shouldn’t 
be  blamed  on  electronic  vot¬ 
ing  machines.  He  blamed  the 
problem  mostly  on  calibration 
issues. 

“The  fundamental  problem 
with  any  touch  screen  is  that 
calibration  matters,  angle  of 
touch  matters,”  Wallach  said. 
Different  people  even  use  dif¬ 
ferent  parts  of  their  fingers  to 
touch  the  screens,  he  said.  The 
only  way  to  fix  the  problem, 
he  suggested,  is  to  increase 
the  size  of  candidate  selection 
buttons  and  place  them  farther 
apart  on  the  screen,  so  “if  you 
miss  one  button,  you’re  not 
likely  to  touch  another  one.” 

A  spokeswoman  for  e-vot- 
ing  machine  vendor  Sequoia 
Voting  Systems  Inc.  said  vote 
flipping  is  caused  by  human 
or  procedural  error,  not  by 
e-voting  machines.  “Some¬ 
times  the  machines  need  to 
be  calibrated  or  recalibrated,” 
she  said.  “Machines  in  and  of 
themselves  do  not  flip  votes.” 

E-voting  machines  are  far 
more  secure,  accurate  and 
auditable  than  the  mechanical 
lever-operated  voting  ma¬ 
chines  and  other  systems  they 
replaced,  the  spokeswoman 
contended.  She  called  vote¬ 
flipping  concerns  a  “conspir¬ 
acy  theory  from  activists  and 
bloggers.” 

A  spokesman  at  e-voting 
equipment  vendor  Diebold 
Election  Systems  also  said  that 
e-voting  machines  don’t  cause 
vote  flipping.  “It’s  not  a  prob¬ 
lem,”  he  said.  “It  doesn’t  exist. 
This  again  falls  into  the  ‘what 
if’  scenario.”  * 
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VMware  Users  Open 
To  More  Competition 


Rivals  pushing  virtualization  vendor 
to  be  more  aggressive,  IT  execs  say 


BY  PATRICK  THIBODEAU 

LOS  ANGELES 

MWARE’S  DOMI¬ 
NANCE  of  the  server 
virtualization  mar¬ 
ket  faces  increasing 
threats  from  Microsoft  Corp. 
and  open-source  rivals.  Proof 
of  that  was  in  evidence  last 
week  at  VMware  Inc.’s  own 
user  conference,  where  com¬ 
petitors  had  booths  and  Micro¬ 
soft’s  virtualization  software 
was  tucked  into  the  backpacks 
handed  out  to  attendees. 

Although  some  users  were 
surprised  by  VMware’s  dis¬ 
play  of  openness  to  its  rivals  at 
VMworld  2006,  the  competi¬ 
tion  is  needed,  according  to  at¬ 
tendees  such  as  David  Freed,  a 
senior  systems  analyst  for  the 
Los  Angeles  city  government’s 
finance  department. 

As  a  result  of  the  competi¬ 
tive  pressure,  VMware  is  “get¬ 
ting  much  quicker  at  releasing 
upgrades,”  said  Freed,  who 
also  thinks  rival  offerings  are 
forcing  VMware  to  be  more 


BY  SHARON  FISHER 

EMC  Corp.  today  plans  to  un¬ 
veil  a  new  version  of  its  Rain- 
finity  file  virtualization  appli¬ 
ance  with  updated  software 
that  offers  better  integration 
with  the  company’s  Centera 
fixed-data  storage  array. 

Version  7.0  of  Rainfinity  also 
features  a  new  file  manage¬ 
ment  application,  said  Jack 
Norris,  the  company’s  director 
of  virtualization  marketing. 

Bill  Fleming,  senior  sys¬ 
tems  administrator  at  Johns 
Hopkins  University’s  Ap¬ 
plied  Physics  Laboratory  in 
Baltimore,  beta-tested  the 
appliance  and  said  the  new  file- 
management  capabilities  make 
it  more  robust.  The  lab  is  using 


aggressive  about  dropping 
prices  and  adding  features. 
‘Competition  is  doing  a  good 
thing  for  [users],”  he  said. 

VMworld  drew  about  7,000 
attendees,  and  users  and  ana¬ 
lysts  at  the  conference  agreed 
that  VMware  is  well  ahead  of 
its  competitors  in  offering  x86 
virtualization  software  with 
sophisticated  functionality. 
But  that  doesn’t  mean  corpo¬ 
rate  IT  managers  are  ignoring 
alternatives  to  the  EMC  Corp. 
subsidiary’s  products. 

Robert  Hopps,  an  IT  man¬ 
ager  at  Safeco  Corp.,  spoke 
at  VMworld  about  the  Seattle- 

H  Microsoft  is 
going  to  want 
to  compete,  and  so 
is  XenSource.  Right 
now,  it  doesn’t  look 
like  they  can. 

DENNIS  ROBINSON,  TECHNICAL 
INFRASTRUCTURE  MANAGER.  GENEX 


it  in  a  project  to  migrate  data 
from  four-year-old  Dell  storage 
devices  to  EMC  Clariion  ar¬ 
rays,  he  said. 

Fleming  said  the  policy 
management  feature  in  Rain¬ 
finity  7.0  is  being  used  to  auto¬ 
mate  the  process  of  archiving 
the  lab’s  300TB  of  data  based 
on  how  recently  information 
has  been  accessed  by  users. 

An  IT  manager  at  a  San 
Francisco-based  retailer,  who 
asked  that  he  and  his  company 
not  be  named,  used  the  previ¬ 
ous  version  of  Rainfinity  to 
migrate  8TB  of  data  from  two 
Network  Appliance  Inc.  filers 
to  an  EMC  Celerra  IP  storage 
array  and  called  it  “a  lifesaver.” 

The  manager  said  he’s  inter- 


based  insurer’s  deployment 
of  VMware  technology  for 
disaster  recovery  purposes 
within  its  IT  operation,  which 
includes  about  1,600  servers. 

“We  like  VMware.  It’s  defi¬ 
nitely  meeting  our  needs  right 
now,”  Hopps  said  after  his 
talk.  But  Hopps  added  that 
he  will  remain  “tool-agnostic” 
and  continue  to  evaluate  rival 
products  against  VMware’s. 

Nicholas  Biggestaff,  a  Unix 
systems  administrator  at  the 
University  of  Missouri’s  main 
campus  in  Columbia,  said  he 
also  likes  VMware’s  software. 
But  he’s  willing  to  consider 
XenSource  Inc.’s  open-source 
technology,  which  he  said  has 
annual  support  costs  that  are 
only  about  one-third  as  much 
as  what  VMware  charges.  “It’s 
cheap  enough  that  it’s  worth 
looking  at,”  Biggestaff  said. 

Genex  Services  Inc.,  a 
medical  management  firm 
in  Wayne,  Pa.,  is  piloting 
VMware’s  tools  in  advance  of 
a  server  consolidation  project 
scheduled  for  next  year. 

“Microsoft  is  going  to  want 
to  compete,  and  so  is  Xen¬ 
Source,”  said  Dennis  Robin- 


ested  in  Version  7.0  for  its  new 
policy  features,  which  would 
allow  the  company  to  identify 
older  data  and  port  it  to  less- 
expensive  storage.  He  said  he’s 
also  interested  in  the  new  ver¬ 
sion’s  support  for  the  Centera 
arrays  installed  at  his  firm. 

Integrating  Rainfinity  with 
Centera  makes  “a  ton  of  sense” 
because  it  creates  a  defined 
storage  tier  between  primary 
and  archived  storage,  said 
Tony  Asaro,  an  analyst  at  En¬ 
terprise  Strategy  Group  Inc. 
Having  tools  that  can  move 
the  data  is  also  critical,  he  said. 

The  appliance  is  scheduled 
to  ship  today.  Pricing  starts 
at  $93,000;  existing  users  can 
upgrade  for  $12,000.  > 


son,  a  technical  infrastructure 
manager  at  Genex.  “Right  now, 
it  doesn’t  look  like  they  can.” 

Nonetheless,  Robinson  said 
he  plans  to  “do  a  little  bit  of  a 
bake-off”  between  VMware 
and  Microsoft  before  a  final 
purchase  decision  is  made. 

Gartner  Inc.  analyst  Carl 
Claunch  said  that  VMware’s 
future  revenue  growth  will 
come  from  virtualization  man¬ 
agement  and  configuration 
tools  —  not  from  the  runtime 
hypervisor  that  provides  the 
underlying  virtualization. 

VMware’s  approach, 

Claunch  said,  is  to  “build  this 
momentum  around  virtual¬ 
ization  —  even  if  some  of  it’s 
from  Xen  and  [Microsoft’s] 


LOS  ANGELES 

POLITICS  was  one  of  the  hot 
topics  at  VMworld  2006,  but  the 
political  talk  had  nothing  to  do  with 
last  week’s  elections.  Instead,  it 
revolved  around  the  internal  issues 
faced  by  users  of  virtualization  soft¬ 
ware,  which  can  unsettle  the  bal¬ 
ance  of  power  within  companies 
and  their  IT  departments. 

Virtualization  can  cause  busi¬ 
ness  users  to  lose  ownership  of 
servers  that  are  consolidated  into 
shared  systems,  making  it  difficult 
for  IT  managers  to  sell  the  technol¬ 
ogy  internally.  There  also  may  be 
resistance  among  IT  staffers  if  the 
idea  is  championed  by  the  busi¬ 
ness  side  or  a  deployment  affects 
storage  and  networking  teams  in 
addition  to  server  managers. 

Political  concerns  such  as  those 
prompted  Larry  Speights  to  attend 
a  VMworld  session  devoted  to 
some  of  the  organizational  chal¬ 
lenges  posed  by  virtualization. 

Control  of  server  resources  is  a 
touchy  issue  for  business  units  that 
have  had  their  own  systems,  said 
Speights,  a  technical  adviser  on 
a  VMware  project  at  a  petroleum 
company  that  he  asked  not  be 
identified.  "The  various  owners  of 
these  systems  say,  ‘It’s  my  system, 
and  when  it's  virtualized,  it’s  not  my 
system  anymore.  It’s  running  shared 
with  everyone  else,'  ”  he  said. 

IT  staffers  may  feel  threatened 
if  the  push  for  virtualization  comes 
from  the  business  side  and  “is 


Virtual  Server  —  and  get  con¬ 
trol  of  configuration  and  man¬ 
agement,  the  part  where  the 
money  is  in  the  enterprise.” 

Jay  Haskins,  a  systems  engi¬ 
neer  at  Holland  America  Line 
Inc.  in  Seattle,  said  the  cruise 
line  has  a  very  good  reason  to 
consider  virtualization:  The 
amount  of  space  for  servers  on 
board  a  ship  is  limited. 

Holland  America  is  testing 
VMware’s  software,  Haskins 
said.  But  he  also  stopped  by 
XenSource’s  booth  last  week. 
Asked  about  VMware’s  deci¬ 
sion  to  allow  its  competitors  to 
display  their  wares,  Haskins 
grinned  and  said  it  was  a  good 
thing  “because  you  can  at  least 
have  other  options.”  » 


not  going  through  their  approval 
process,"  said  Brad  Wagner,  a 
technical  lead  for  platform  services 
at  Georgia  Pacific  Corp.  in  Atlanta. 
“It’s  typically  a  bad  thing  when  the 
executives  agree  to  a  technology 
and  the  technical  people  didn’t 
invent  it  there.” 

Wagner  and  Gary  Tierney,  senior 
manager  of  technical  services  at 
Fair  Isaac  Corp.  in  Minneapolis, 
have  each  been  running  systems 
equipped  with  VMware’s  software 
for  about  three  years. 

Tierney  said  he  prepared  an 
elaborate  presentation  about  the 
technology  for  employees  at  Fair 
Isaac.  But  he  learned  for  himself 
that  IT  workers  from  different 
functional  areas  needed  to  be 
more  tightly  integrated  because  of 
virtualization’s  far-reaching  effects. 

What  often  sells  business  man¬ 
agers  on  virtualization  is  the  prom¬ 
ise  of  reduced  IT  costs  through 
hardware  and  systems  manage¬ 
ment  savings.  Tierney,  though, 
recommended  that  IT  managers 
shouldn't  make  any  distinctions 
between  their  physical  and  virtual 
servers  with  end  users. 

“In  the  beginning,  we  were  having 
some  issues  with  people  accepting 
virtualization  and  what  it  meant  for 
them,”  Tierney  said.  Now,  he  said,  IT 
staffers  find  it  easier  to  just  provide 
a  server  when  users  need  one, 
without  specifying  whether  it’s  an 
actual  or  virtual  system. 

-  PATRICK  THIBODEAU 
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Dual-Mode  Capability  Unites  Wi-R,  Cell  Networks 


BY  MATT  HAMBLEN 

As  wireless  LANs  continue  to 
spread  through  corporate  sites, 
several  vendors  are  moving  to 
offer  dual-mode  products  that 
can  support  both  Wi-Fi  and 
extended  cellular  networks. 

“We’d  be  quite  interested 
in  that  capability  —  to  have 
a  Wi-Fi  [handset]  work  as  a 
cell  phone,”  said  John  Tuman, 
director  of  network  services  at 
WakeMed  Health  &  Hospitals 
in  Raleigh,  N.C. 

The  medical  center  already 
has  about  650  SpectraLink 
voice  handsets  used  by  nurses 
over  a  Wi-Fi  network  from 
Aruba  Wireless  Networks 
Inc.,  along  with  about  500 
separate  cell  phones.  It  would 
be  valuable  to  have  one  phone 
that  could  work  over  both  net¬ 
works,  mainly  for  the  conve¬ 
nience  of  users,  Tuman  said. 

WakeMed  plans  to  buy  Aru¬ 
ba  software  that’s  expected  to 
be  available  early  next  year  that 
can  support  dual-mode  phones 
running  between  Wi-Fi  and 
cellular  networks.  The  updated 
software  will  run  on  a  new 
Aruba  6000  Mobility  Control¬ 
ler  switch  that  will  be  installed 
later  this  month  at  the  health 
care  company,  Tuman  said. 

Aruba  last  week  unveiled 
a  product  road  map  that  in¬ 
cludes  plans  for  adding  sup¬ 
port  for  multiple  networks  to 
its  Mobile  Voice  Continuity 
software.  The  software  is  slat¬ 
ed  to  be  available  in  the  first 
quarter  of  2007,  said  Aruba 
founder  Keerti  Melkote. 

Seeing  Results 

WakeMed  has  600  access 
points  spread  throughout  2  mil¬ 
lion  square  feet  of  space  in  its 
facilities,  along  with  nine  Aru¬ 
ba  Mobility  Controller  switches. 

The  medical  center  also  wants 
to  set  up  radio  frequency  iden¬ 
tification  technology  through¬ 
out  the  medical  center  that  will 
be  supported  by  its  existing 
Wi-Fi  network,  Tuman  said. 

Already,  the  voice-over-wire¬ 
less  capability  helps  nurses  bet¬ 
ter  maintain  contact  with  their 
patients,  according  to  Tuman. 
“It's  working  well,”  he  said.  “It 
gives  nurses  faster  response  to 
calls.  Nurses  like  the  flexibility 


of  not  being  tethered.” 

Meanwhile,  Symbol  Tech¬ 
nologies  Inc.  released  a  new 
wireless  switch  that  can  sup¬ 
port  dual-mode  phone  hand¬ 


overs  with  the  addition  of  a 
software  module,  a  spokesman 
said.  The  new  RFS7000  RF 
switch  is  set  to  ship  in  2007. 

Siemens  Communications 


Inc.  plans  to  add  similar  capa¬ 
bilities  to  its  HiPath  product 
line  in  late  2007  or  early  2008, 
a  company  spokesman  said. 

Paul  DeBeasi,  an  analyst  at 
Burton  Group,  said  such  dual¬ 
mode  capabilities  can  let  users 


make  cellular  calls  that  are 
switched  through  a  Wi-Fi  net¬ 
work  and  then  onto  a  wireline 
switch.  Because  of  that,  ven¬ 
dors  call  the  dual-mode  hand¬ 
over  capability  fixed-mobile 
convergence,  he  said.  * 


APC  Buy  Puts  More  Power  in  Schneider’s  Hands 


BY  PATRICK  THIBODEAU 

The  planned  acquisition  of 
American  Power  Conversion 
Corp.  by  Schneider  Electric 
SA  would  combine  two  ven¬ 


dors  that  now  sell  competing 
backup  power  devices  for  data 
centers,  although  Schneider 
has  only  a  small  share  of  that 
market  in  the  U.S. 


It’s  too  soon  to  say  whether 
customers  of  either  company 
can  expect  product  line  con¬ 
solidations  as  a  result  of  the 
$6.1  billion  deal,  according  to 


APC  spokesman  Aaron  Davis. 

Nonetheless,  Davis  said 
APC  officials  have  been  reach¬ 
ing  out  to  users  since  the  deal’s 
announcement  two  weeks 
ago,  telling  them  that  the  West 
Kingston,  R.I.-based  company 
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will  still  be  able  to  meet  their 
needs.  “One  of  our  priorities  is 
to  make  our  transition  to  new 
ownership  smooth  and  seam¬ 
less  for  them,”  Davis  said. 

But  Seth  Mitchell,  infra¬ 
structure  team  leader  at  Slum- 
berland  Inc.  in  Little  Canada, 
Minn.,  said  he  thinks  the  com¬ 
bination  of  Schneider  and  APC 
will  be  a  difficult  fit. 

Mitchell  uses  APC’s  un¬ 
interruptible  power  supply 
products  and  said  he  has 
experience  with  the  offerings 
of  Schneider’s  MGE  UPS  Sys¬ 
tems  unit  as  well. 

“I  don’t  see  a  lot  of  posi¬ 
tives  in  the  short  term,”  said 
Mitchell,  whose  company 
operates  more  than  100  fur¬ 
niture  stores  in  10  states.  “It 
might  look  nice  on  a  balance 
sheet.  But  getting  two  fierce 
competitors  to  integrate  their 
highly  contrasted  ideologies 
to  produce  a  cohesive  set  of 
products  and  services  seems 
like  a  big  task.” 

Potential  Advantages 

On  the  other  hand,  Vishal 
Sapru,  an  analyst  at  Frost  & 
Sullivan  Ltd.  who  focuses 
on  the  backup  power  market, 
said  the  acquisition  should 
benefit  APC’s  customers  by 
giving  them  improved  access 
to  Schneider’s  line  of  UPS 
products. 

The  deal  will  give  Schneider 
the  top  spot  in  the  worldwide 
market  for  backup  power  de¬ 
vices,  according  to  Sapru.  He 
said  that  APC  controls  28%  of 
the  market  in  North  America, 
twice  as  much  as  its  closest 
competitor,  Eaton  Corp. 

France-based  Schneider’s 
MGE  unit  is  stronger  in  Eu¬ 
rope  than  it  is  in  North  Amer¬ 
ica,  where  its  market  share 
is  only  between  2%  and  3%, 
Sapru  added. 

Schneider  said  it  expects  to 
complete  the  all-cash  acquisi¬ 
tion  in  next  year’s  first  quarter. 
APC,  which  also  sells  cooling 
systems  and  other  data  center 
products,  earned  $45.1  million 
on  revenue  of  $621.3  million  in 
this  year’s  third  quarter. 

But  Schneider  said  that 
APC’s  profit  margins  have 
been  hurt  by  the  "significant 
investments”  it  lias  been  mak¬ 
ing  in  large  UPS  systems.  * 
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if  E me  to  Quit  Network 
After  Shift  in  Budgeting 

FYRMONT,  AUSTRALIA 

EVEN  NETWORK  LTD.,  a  television 
network  operator  and  magazine 
publisher  based  here,  is  losing  its 
top  technology  executive  in  the  midst 
of  a  move  to  transfer  IT  budgeting  re¬ 
sponsibility  to  its  chief  financial  officer. 

A  spokesman  for  Seven  Network 
confirmed  last  week  that  CFO  Peter 
Lewis  has  taken  over  direct  responsi¬ 
bility  for  the  company’s  IT  budget. 

Meanwhile,  Steven  Longo,  general 
manager  of  group  IT  services  at  Seven 
Network,  confirmed  that  he  will  leave 
his  job  next  month.  Longo  declined 
to  discuss  the  ongoing  changes  to  the 
company’s  IT  organization. 

His  planned  exit  follows  the  resigna¬ 
tion  earlier  this  year  of  Peter  Whitford, 
who  left  his  job  as  information  systems 
manager  after  more  than  20  years  at 
Seven  Network. 

The  company  spokesman  said  IT 
operations  will  be  managed  by  the 
head  of  its  broadcast  engineering  unit. 
The  spokesman  downplayed  the  shift 
in  budget  responsibility,  saying  there 
are  no  IT  restructuring  or  cost¬ 
cutting  plans.  “The  word 
restructure  is  too  grand  a 
term,”  he  said.  “IT  has  al¬ 
ways  been  part  of  broad¬ 
cast  engineering.” 

In  a  survey  of  275 
CIOs  conducted  this 
year  by  the  Australian 
edition  of  CIO,  a  Com- 
puterworld  sister  publi¬ 
cation,  only  about  one- 
third  of  the  respondents 
said  that  they  reported 
directly  to  the  CEO  at 
their  companies  instead  of  to  the  CFO. 
s  SANDRA  ROSSI, 

COMPUTERWORLD  AUSTRALIA 


India  OKs  Yahoo’s 
Internet  Phone  Plans 

BENGALURU,  INDIA 

JTAHO°  1NC-  last  week  said  it  has 
.P?  been  given  permission  by  India’s 
national  government  to  offer 
Internet  telephony  services  to  custom¬ 
ers  in  the  country. 

AOL  LLC  also  plans  to  introduce  a 
set  of  Web-based  services,  including 
Internet  telephony  and  instant  messag¬ 
ing,  in  the  Indian  market,  according 


to  a  spokesman  for  AOL  India.  The 
spokesman  said  that  will  happen  soon, 
but  he  wouldn’t  disclose  a  date  for 
launching  the  services. 

Yahoo  is  creating  a  new  company 
called  Yahoo  Internet  Communica¬ 
tions  India  to  offer  its  telephony  servic¬ 
es,  a  spokeswoman  said.  The  telephony 
operation  will  be  separate  from  the 
company’s  existing  Yahoo  India  sub¬ 
sidiary  in  Bengaluru,  which  formerly 
was  known  as  Bangalore. 

Internet  telephony  has  become  a 
potentially  large  source  of  revenue  be¬ 
cause  of  the  rapid  growth  of  Web  use 
in  India,  the  Yahoo  spokeswoman  said. 

■  JOHN  RIBEIR0,  IDO  NEWS  SERVICE 

Veterans  Agency  Plans 
To  Redesign  Web  Site 

SYDNEY,  AUSTRALIA 

HE  AUSTRALIAN  Department  of 
Veterans’  Affairs  is  seeking  bids 
from  vendors  for  a  contract  to 
redesign  the  agency’s  Web  site  in  order 
to  make  information  easier  to  find. 

Bids  are  due  by  the  end  of  this  month, 
and  work  on  the  project  is  scheduled 
to  begin  in  January  or  February  and  be 
completed  by  April  30. 

Margaret  Millard,  the 
project  coordinator  at 
the  DVA,  said  the  compa¬ 
ny  that  wins  the  contract 
will  be  responsible  for 
designing  a  service- 
oriented  architecture 
based  on  input  it  gathers 
from  user  focus  groups. 

“We  want  to  redesign 
the  architecture  of  the 
site  because  people  can¬ 
not  find  stuff,”  Millard 
said.  “What  we  are  do¬ 
ing  now  is  long  overdue.  The  Web  site 
has  been  in  need  of  redevelopment  for 
several  years,  and  we  have  finally  got 
approval  to  do  it.” 

According  to  the  DVA’s  bid  docu¬ 
ments,  the  current  Web  site  supports 
only  a  limited  number  of  online  trans¬ 
actions.  The  agency  said  in  the  bid 
papers  that  it  is  aiming  to  “significantly 
expand  [the  site’s]  e-business  capability 
in  the  short-to-medium  term.” 

Development  of  the  Web  site’s  con¬ 
tent  and  graphics  will  continue  to  be 
done  internally  and  isn’t  covered  by 
the  proposed  contract,  the  DVA  said. 

■  MICHAEL  CRAWFORD, 

COMPUTERWORLD  AUSTRALIA 


GLOBAL  FACT 

27933 

The  total  number  of 
thin-client  systems  sold 
in  the  Asia-Pacific  region 
(excluding  Japan)  last  year, 
a  64%  increase  over  the 
2004  sales  level. 

SOURCE:  IDC. 

FRAMINGHAM,  MASS. 


Samsung  Unit  Among 
Raided  Chip  Makers 

SCHWALBACH,  GERMANY 

AMSUNG  SEMICONDUCTOR 
Europe  GmbH  confirmed  this 
month  that  it  was  one  of  several 
chip  makers  in  Germany  raided  by  the 
European  Commission  as  part  of  an  in¬ 
vestigation  of  alleged  price  fixing. 

The  EC  disclosed  on  Oct.  31  that  it 
had  conducted  unannounced  inspec¬ 
tions  at  the  offices  of  several  static 
RAM  manufacturers  in  Germany. 
However,  it  didn’t  identify  the  compa¬ 
nies  that  were  raided. 

Such  surprise  inspections  are  part  of 
the  preliminary  stages  of  price-fixing 
investigations,  the  EC  said. 

Samsung’s  offices  in  Schwalbach, 
near  Frankfurt  am  Main,  were  raided 
by  EC  officials  on  Oct.  11,  according  to 
a  spokesman  for  the  company. 

“For  the  time  being,  we  are  fully 
cooperating  with  the  investigation,” 
the  spokesman  said.  He  added  that 
Samsung  hasn’t  been  asked  to  turn 
over  any  specific  documents  to  the 
investigators. 

■  NANCY  60HRING,  IDG  NEWS  SERVICE 


Motorola  Protest  Leads 
Court  to  Delay  Contract 

DELHI,  INDIA 

HE  DELHI  High  Court  has  delayed 
the  awarding  of  a  mobile  network 
equipment  contract  by  telecom¬ 
munications  service  provider  Bharat 
Sanchar  Nigam  Ltd.  in  response  to 
Motorola  Inc.’s  complaint  that  it  was 
unfairly  excluded  from  the  bidding. 

In  its  Nov.  2  decision,  the  court 
ordered  BSNL  not  to  award  the  con¬ 
tract  before  this  Thursday,  when  the 
next  hearing  in  the  case  is  scheduled. 
Neither  Motorola  nor  BSNL,  which 
is  owned  by  the  Indian  government, 
would  comment  about  the  ruling. 

Motorola  filed  a  lawsuit  against 
New  Delhi-based  BSNL  last  month, 
after  its  bid  for  the  contract  for 
GSM  and  3G  cellular  network  equip¬ 
ment  was  disqualified  on  technical 
grounds.  As  part  of  the  lawsuit, 
Motorola  said  it  was  seeking  further 
clarification  about  the  bidding 
process  from  BSNL. 

LM  Ericsson  Telephone  Co.  and 
Nokia  Corp.  were  the  low  bidders  for 
the  contract.  China-based  telecommu¬ 
nications  equipment  maker  ZTE  Corp. 
also  submitted  a  bid,  but  it  too  was  dis¬ 
qualified  for  technical  reasons. 

■  JOHN  RIBEIR0,  IDG  NEWS  SERVICE 


Compiled  by  Mike  Bucken. 


Briefly  Noted 

Nokia  Corp.  said  it  was  awarded 
a  seven-year  contract  worth 
$297  million  Australian  dollars 
($230  million  U.S.)  to  continue  pro¬ 
viding  engineering,  operations  and 
field  maintenance  services  for  Voda¬ 
fone  Group  PIC’s  mobile  networks 
in  Australia.  The  deal  extends  a  con¬ 
tract  signed  in  2004  under  which 
Nokia  manages  Vodafone  Australia’s 
GSM,  3G  and  HSDPA  networks. 

■  DARREN  PAULI, 

COMPUTERWORLD  AUSTRALIA 


Intel  Corp.  and  Micron  Technology 
Inc.  last  week  announced  plans  to 
build  a  factory  in  Singapore  to  pro¬ 
duce  NAND  flash  memory  devices. 
Construction  on  the  plant  will  begin 
during  the  first  half  of  next  year  and 
will  cost  “billions  of  dollars,”  the 
companies  said.  Intel  and  Boise, 
Idaho-based  Micron  plan  to  create  a 
joint  venture  to  run  the  new  factory. 
■  SUMNER  LEMON, 

IDG  NEWS  SERVICE 


Hewlett-Packard  Co.  and  SAP  AG 

last  week  announced  that  their 
research  organizations  will  work 
together  on  IT  issues,  focusing 
initially  on  hardware  and  software 
virtualization.  The  joint  effort  will 
include  collaboration  by  workers  at 
HP  Labs  in  the  U.K.  and  the  U.S. 
and  at  SAP  Research  in  Australia, 
Germany  and  Northern  Ireland. 

The  companies  didn’t  provide  any 
financial  details  or  say  how  many 
staffers  will  take  part. 

■  CHINA  MARTENS, 

IDG  NEWS  SERVICE 


NTT  DoCoMo  Inc.  said  the  number 
of  subscribers  to  its  3G  cellular  tele¬ 
phone  service  in  Japan  hit  30  mil¬ 
lion  on  Nov.  4,  just  over  five  years 
after  the  service  was  launched. 
Tokyo-based  NTT  DoCoMo  added 
that  it  has  had  more  3G  subscribers 
than  2G  subscribers  since  midyear. 
■  MARTYN  WILLIAMS, 

IDG  NEWS  SERVICE 


Nortei  Networks  Ltd.  last  week 
said  it  has  opened  a  180,000- 
square-foot  facility  in  Beijing  that 
will  support  the  development  of  next- 
generation  products  for  customers 
worldwide.  The  new  facility,  Nortel’s 
third  development  center  in  China, 
also  houses  the  headquarters  of  the 
Brampton,  Ontario-based  vendor’s 
Chinese  operations. 
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Cingular's  New  3G  L  a  p  t  o  p  C  o  n  n  e  c  t  Card 


now 


is  global,  broadband,  secure. 


Business  is  not  bound  by  geography.  Wireless 
shouldn't  be  either.  With  Cingular's  LaptopConnect 
card,  you  can  work  at  broadband  speeds  here  and 
abroad.  Do  better  business  with  now. 


>  Cingular  is  the  only  U.S.  wireless  provider  to  offer 
a  3G  global  solution  from  a  single  laptop  card. 

>  No  one  has  a  faster  wireless  broadband  network 
than  Cingular. 

>  Largest  national  high-speed  wireless  data  network 
with  mobile  broadband  speeds  in  over  130  major 
U.S.  markets  and  growing. 

>  More  secure  than  Wi-Fi  and  with  a  wider  coverage 
area  -  no  hotspots  required. 
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Get  Cingular's  Global  3G 
LaptopConnect  card  for  only 


$4999 


after  $100  mail-in  rebate  debit  card 
with  2-year  service  agreement  on 
Unlimited  Data  Connect  plan. 


Call  1-866-4CWS-B2B  Clickwww.cingular.com/broadbandconnect  Visit  your  nearest  Cingular  store 
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Limited-time  offer.  Other  conditions  and  restrictions  apply.  See  contract  and  rate  plan  brochure  for  details.  Subscriber  must  live  and  have  a  mailing  address  within  Cingular's  owned  network  coverage  area.  Up  to  $36  activation  fee  applies.  Equipment  price  and  availability  may  vary  by  market  and  may  not 
be  available  from  independent  retailers.  Early  Termination  Fee:  None  if  cancelled  in  the  first  30  days;  thereafter  $175.  Some  agents  impose  additional  fees.  Rebate  Debit  Card:  LaptopConnect  card  price  before  mail-in  rebate  debit  card  with  Unlimited  Data  Connect  plan  purchase  is  $149.99.  Allow  id-12 
weeks  for  rebate  debit  card.  Rebate  debit  card  not  available  at  all  locations.  Must  be  customer  for  30  consecutive  days.  Must  be  postmarked  by  12/30/06.  Sales  tax  calculated  based  on  price  of  unactivated  equipment.  ©2006  Cingular  Wireless.  All  rights  reserved. 
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Microsoft  Takes  Criticism  of 
Sun  Deal  to  Heart,  Exec  Says 


Crafts  Novell  pact  to  avoid  similar 
reaction;  says  Red  Hat  users  not  at  risk 


BY  JEREMY  KIRK 

Two  weeks  ago,  Microsoft  Corp. 
and  Novell  Inc.  agreed  to  un¬ 
dertake  a  joint  effort  to  enable 
Novell’s  SUSE  Linux  and 
Microsoft’s  Windows 
operating  system  to  bet¬ 
ter  work  together.  They 
also  agreed  to  indemnify 
SUSE  Linux  users  from 
lawsuits  for  violations  of 
Microsoft  patents.  The 
move  prompted  ques¬ 
tions  about  Microsoft’s 
long-term  open-source 
plans  and  how  this  deal  com¬ 
pares  to  an  earlier  deal  with 
Sun  Microsystems  Inc.,  which 
has  been  criticized  for  lacking 
substance.  In  an  interview  with 
the  IDG  News  Service  last  week, 
Bill  Hilf,  general  manager  for 
platform  strategy  at  Microsoft, 
spoke  about  both  deals  and 
about  how  the  company  regards 
open-source  software. 

How  does  Microsoft  view  open 
source?  Microsoft  does  not 
compete  with  open  source.  We 
compete  with  open-source 
products  that  people  sell.  When 
we  did  the  deal  with  JBoss  [an 
open-source  middleware  com¬ 
pany  now  owned  by  Red  Hat], 
we  found  a  few  interesting 
stats.  Half  of  their  users  were 
running  on  Windows.  We  also 
found  that  after  we  did  the  deal, 
we  sold  more  Windows  server 
licenses.  That’s  just  fundamen¬ 
tal  good  business.  So  when  we 
get  into  the  competitive  debate, 
JBoss  helped  our  Windows 
server  business  grow. 

What  is  Microsoft’s  motivation 
for  the  deal  with  Novell?  This 
is  an  intellectual  property 
deal.  There  will  be  an  over¬ 
lap  at  some  point  between 
our  intellectual  property  and 
open  source  that  we  have  to 
resolve.  We  said  let’s  put  in 
place  something  that  allows 


Q&A 


us  to  A)  establish  a  process 
for  how  we  can  work  with  an 
open-source  company  on  our 
intellectual  property;  B)  do  it 
in  such  as  way  that  it 
can  still  work  within 
the  GPL  [GNU  General 
Public  License];  and  C) 
do  this  in  a  way  where 
we  can  clearly  draw  the 
line  between  the  com¬ 
munity  developer,  the 
noncommercial  open- 
source  community  guy 
writing  code  and  the 
commercial  developer  who  is 
using  open-source  code. 

Doing  one  of  those  is  easy; 


doing  two  of  them  is  actually 
hard  but  possible.  Doing  all 
three  is  very,  very  hard  be¬ 
cause  one  can  contradict  the 
other. 

Why  did  Microsoft  agree  not  to 
sue  SUSE  users  and  noncommer¬ 
cial  open-source  developers  for 
patent  infringement?  We  have 
the  largest  software  patent 
portfolio  in  the  world.  With 
open  source,  we  needed  to 
have  something  in  place  where 
we  knew  that  if  our  intellec¬ 
tual  property  was  infringed 
upon,  we  had  a  framework  in 
place  to  resolve  that  in  an  ef¬ 
fective  way. 

Isn’t  this  a  veiled  threat  to  Red 
Hat  users  -  that  commercial  de¬ 


velopers  are  only  legally  protected 
by  using  SUSE  Linux?  There’s 
no  threat.  There’s  a  fundamen¬ 
tal  premise  that  we  need  to 
have  the  market  understand 
we  have  a  substantial  amount 
of  intellectual  property  in  the 
operating  system  space. 

Is  Microsoft  going  to  approach 
other  open-source  vendors?  Our 

door  is  open  to  anyone  to  do  a 
similar  deal. 

Is  there  any  significance  to  the 
timing  of  the  Novell  deal?  We 

started  on  the  general  frame¬ 
work  for  this  three  years  ago. 
The  deal  with  Novell  started 
about  six  months  ago.  There 
was  just  a  lot  of  work  we 
needed  to  do  to  understand 


the  GPL  side  of  it  and  not  vio¬ 
late  the  GPL.  We  are  saying 
we  are  providing  coverage  for 
Novell’s  customers  from  a  Mi¬ 
crosoft  intellectual  property 
perspective.  That  allows  us 
to  work  with  the  GPL  because 
the  GPL  is  very  specific  about 
licensing  of  patents. 

People  look  back  on  Microsoft’s 
2004  technology  development 
deal  with  Sun  and  wonder  what  it 
accomplished.  Will  we  look  back 
at  the  Novell  deal  in  two  years 
and  wonder  what  really  came 
out  of  it?  We’ve  gotten  a  lot  of 
reaction  about  that.  There’s 
actually  a  tremendous  amount 
of  work  that  we  do  with  Sun 
at  an  engineering  level,  but  it 
just  doesn’t  get  exposed.  We 
made  sure  to  put  some  impor¬ 
tant  things  in  place  that  would 
be  visible  into  this  work,  like 
a  joint  lab.  Also,  we  are  put¬ 
ting  a  substantial  amount  of 
co-marketing  into  this.  We’ve 
learned  from  the  Sun  market 
reaction.  * 


Eclipse  Picks  up  Speed  at  Five-Year  Mark 

Open-source  IDE 
gaining  ground 
in  corporate  IT 


BY  HEATHER  HAVENSTEIN 

Five  years  ago  this  month,  the 
Eclipse  consortium  was  un¬ 
veiled  by  IBM  and  others  with 
an  eye  toward  offering  tools 
based  on  the  open-source 
Eclipse  integrated  develop¬ 
ment  environment  (IDE). 

Since  then,  use  of  Eclipse 
has  spread  among  corporate 
developers  working  with  both 
the  publicly  available  Eclipse 
source  code  and  packaged 
tools  based  on  the  technology 
from  vendors  such  as  IBM, 
BEA  Systems  Inc.  and  Borland 
Software  Corp. 

Market  research  firm  IDC 
estimates  that  more  than 
20%  of  software  developers 
worldwide  work  in  organiza¬ 
tions  that  make  significant  use 
of  Eclipse.  The  IDE  has  been 
managed  by  the  not-for-profit 
Eclipse  Foundation  in  Ottawa 
since  early  2004. 

“Compared  to  other  com¬ 


mercial  products,  Eclipse  is 
much  better  in  quality  and 
features,”  said  Barry  Stras- 
nick,  CIO  at  benefits  provider 
CitiStreet  LLC.  “There  is  very 
little  reason  to  spend  money 
on  commercial  IDEs  any¬ 
more.  We  have  not  enforced 
[Eclipse’s]  use  for  all  develop¬ 
ers,  but  it  has  become  the  de 
facto  standard.” 

A  Boost  for  Productivity 

Based  on  surveys  of  CitiStreet 
developers,  Strasnick  said 
that  Eclipse  makes  software 
development  more  efficient  be¬ 
cause  it  reports  errors  as  soon 
as  code  is  typed  and  because 
Eclipse  can  better  organize 
Java  code  without  requiring 
that  it  be  manually  changed. 

“The  quality  of  the  Java 
code  produced  using  Eclipse 
is  much  better  than  code 
produced  using  other  tools,” 
Strasnick  said. 

John  Cunningham,  presi¬ 
dent  of  Band  XI  International 
LLC  in  West  Hartford,  Conn., 
said  his  company  used  Eclipse 
to  build  a  commercial  wireless 
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application  that  runs  on  hand¬ 
held  devices  and  monitors  sen¬ 
sors  for  nerve  agents,  cyanide, 
radiation  and  other  threats. 

The  application,  called 
Cyrano,  was  used  by  the 
Michigan  National  Guard  to 
patrol  for  possible  biological, 
chemical  or  nuclear  attacks  at 
the  2006  Super  Bowl  in  Detroit 
and  at  NASCAR  races  in  the 
state  in  June  and  August. 

Philip  Rusiecki,  survey 
team  leader  in  the  Michigan 
National  Guard’s  51st  Weap¬ 
ons  of  Mass  Destruction  Civil 
Support  Team,  said  that  prior 


to  automating  the  monitoring 
effort  with  Cyrano,  soldiers  at 
such  events  had  to  use  radios 
to  report  sensor  readings  to  a 
command  center. 

The  unit  first  used  the  Cyra¬ 
no  application  at  the  Super 
Bowl  in  February,  he  said. 

In  the  past,  Rusiecki  said, 
the  soldiers  —  who  would 
likely  be  among  the  first  to 
respond  to  a  terrorist  attack 
—  would  spend  20%  to  30%  of 
their  time  reporting  results. 
“Cyrano  allows  us  to  log  all 
the  readings  that  come  back 
from  the  hot  zone,”  he  said.  “It 
allows  the  soldiers  to  concen¬ 
trate  on  their  mission  and  not 
on  reporting  back  readings 
from  radiation  meters.” 

David  Johnson,  director 
of  software  engineering  at  E 
Entertainment  Television  Inc. 
in  Los  Angeles,  said  that  most 
developers  at  his  company 
choose  to  use  the  Eclipse  IDE. 

“Eclipse  early  on  integrated 
well  with  our  source  manage¬ 
ment  system,”  he  said,  “where 
other  tools  were  lagging  be¬ 
hind  in  support.”  > 


www.computerworld.com 


READERS’  LETTERS 


November  13, 2066  CQMPifTERWORLD  2§ 


Hurd  Enough 

THE  STORY  “Hurd:  T  Wish  I  Had 
Asked  More  Questions’  ”  [Com- 
puterworld.com,  Sept.  28]  makes  you 
wonder  just  why  Mark  Hurd  still  has 
his  job.  As  CEO  of  HP,  it  was  his  job  to 
oversee  the  work  of  others.  The  daily 
operations  of  HP  were  handled  by 
several  managers  at  the  top  level.  All 
Hurd  had  to  do  was  make  sure  they 
were  doing  their  jobs  correctly.  What 
kind  of  CEO  doesn’t  read  all  com¬ 
munications  sent  to  him  personally?  If 
that's  what  CEOs  do  in  the  corporate 
world,  then  we  have  some  very  sick 
corporations. 

Dennis  S.Reiley 
Flint,  Mich., 
reiley@usol.com 

Speech  Technology 
Is  Not  for  Everyone 

BEFORE  YOU  start  congratu¬ 
lating  yourselves  about  the 
coming  age  of  voice-based  ap¬ 
plications  [“Now  We’re  Talking," 
Technology,  Oct.  2],  you  need  to 
remember  that  there  will  always  be 
people  whose  voices  are  impeded 
because  of  a  lisp,  a  stutter,  a  stroke 
or  alcohol. 

While  the  moralists  can  dismiss 
the  alcoholic,  there  are  others  such 
as  me  who  are  afflicted  with  a  stutter, 
and  we  will  prefer  a  keyboard. 
Thomas  B.  Knoedler 
Programmer/analyst, 

Springfield,  III. 

Words  Readers 
Love  to  Hate 

WHEN  IT  comes  to  “Words  We 
Love  to  Hate”  [Management, 
Oct.  9],  don't  forget  “leveraging" 
(using  what  you  already  own)  and 
“human  capital”  (employees). 

That  last  one  just  gives  you  a  warm, 
fuzzy  feeling  and  lets  you  know  they 
care. 

Liam  Newnan 

Systems  administrator, 

Charlotte,  N.C. 


No  Fuel  Fool 

Regarding  your  Sept.  18 
article  “Data  Centers  Eye  ‘Green’ 
Power"  [News],  just  who  are  we 
kidding  here?  The  fact  is  that  hydro¬ 
gen  production  requires  energy  to 
generate  it,  especially  if  the  hydrogen/ 


oxygen  source  is  from  electrolysis 
of  water,  which  requires  copious 
quantities  of  electricity,  most  likely 
from  fossil-fueled  power  plants.  Thus, 
there  is  nothing  “green”  about  fuel 
cells,  other  than  the  fact  that  there  are 
no  air  emissions  in  the  vicinity  of  use, 


compared  with  generators. 

Fuel  cells  are  worthy  of  consider¬ 
ation  in  the  role  of  a  UPS,  such  as  the 
flywheel  technology  that  you  mention 
near  the  end  of  the  article.  I  read  no 
mention  of  fuel  cells  only  for  UPS 
use,  which  is  the  only  application  that 


makes  any  sense  at  ail  for  this 
technology  in  a  data  center. 

Tony  Favero 

Systems  administrator. 

Half  Moon  Bay,  Calif, 
favero_t@hotmail.com 

More  Letters,  page  27 


HERE  ARE  a  few  more:  agile 
development  (anyone  over  50 
can  hit  the  bricks);  alignment  (my  way; 
antonym:  the  highway);  onboarding 
(oops,  outsourcing  was  a  disaster); 
sysprog  and  sysadmin  (major  and 
minor  deities);  team  player  (anyone 
who  gets  alignment). 

Dan  Sitler 

Lead  software  programmer, 

Hobart  Corp., 

Troy,  Ohio 
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DON  TENNANT 

Argument  of  Convenience 


MICHAEL  GARTENBERG 

Vista’s  Pros 
And  Cons 


HE  ANCHOR  STORY  of  our  20th 
Annual  Salary  Survey  package  has  an 
Ig  intriguing  headline:  “The  Lucky  Ones” 
H  (page  41).  The  accompanying  slot- 
m  machine  artwork  illustrates  the  story’s 
contention  that  “a  few  lucky  [IT  workers]  with  the 
hottest  skills”  have  won  the  salary-increase  jackpot. 


I’m  not  so  sure.  I  doubt 
that  luck  has  much  at  all 
to  do  with  how  IT  pros 
with  hot  skills  are  faring. 

The  fact  that  the  increas¬ 
es  in  salaries  for  network 
architects,  Web  devel¬ 
opers  and  e-commerce 
directors  outpaced  the 
increases  for  other  IT  job 
categories  isn’t  a  matter 
of  chance,  and  neither  is 
finding  oneself  in  one  of 
those  enviable  positions. 

Individuals  in  positions 
that  garnered  above-average  salary 
increases  this  year  recognize  that  you 
can’t  just  sit  on  your  existing  skills 
and  hope  to  get  lucky.  They’ll  tell  you 
that  you  need  to  proactively  research 
where  the  greatest  demand  lies  and 
adjust  your  career  path  accordingly. 
That  may  or  may  not  be  worth  the 
effort  to  you.  If  it’s  not,  that’s  fine. 

But  don’t  fool  yourself  into  think¬ 
ing  that  the  people  in  those  positions 
simply  had  the  good  fortune  of  being 
in  the  right  place  at  the  right  time.  Al¬ 
most  one-third  of  directors  of  e-com- 
merce,  the  biggest  winners  in  our 
survey,  reported  that  they  had  dif¬ 
ferent  job  titles  a  year  ago.  Overused 
as  it  may  be,  there’s  something  to  be 
said  for  the  old  Wayne  Gretzky  line 
about  skating  to  where  the  puck  is  go¬ 
ing  to  be,  not  to  where  it  has  been. 

All  of  that  said,  the  fact  remains 
that  chance  is  indeed  a  key  factor 
in  determining  how  much  money 
you’re  likely  to  make  as  an  IT  profes¬ 
sional.  If  you  happen  to  have  been 
born  female,  odds  are  you’re  making 
12%  less  than  you’d  be  making  if  you 
had  been  born  male,  according  to 
this  year’s  survey. 


That  finding  is  even 
more  troubling  than 
our  discovery  from  last 
year’s  survey  that  women 
were  making  10%  less 
than  their  male  coun¬ 
terparts.  I  subsequently 
wrote  about  the  injustice 
of  that,  and  I  got  an  ear¬ 
ful  from  indignant  males 
who  insisted  that  the  fig¬ 
ures  don’t  tell  the  whole 
story.  They  argued  that 
since  the  numbers  aren’t 
weighted  to  account  for 
factors  such  as  family  considerations 
that  compel  women  to  steer  away 
from  what  would  be  career-enhanc¬ 
ing  relocations,  dollar-for-dollar 
comparisons  like  this  are  misleading. 

I  agree  that  the  gender  wage-gap 
issue  isn’t  black  and  white.  But  dis¬ 
missing  the  disparity  altogether  as 
a  reflection  of  the  choices  women 


willingly  make  to  balance  their  home 
and  work  lives  is  an  argument  of 
convenience.  Regardless  of  how  it’s 
rationalized,  a  12%  gap  is  wholly 
inconsistent  with  the  standards  of 
fairness  and  equity  that  we  should 
expect  in  the  workplace.  And  the  fact 
that  the  gap  is  wider  this  year  than  it 
was  last  year  suggests  that  no  appre¬ 
ciable  effort  is  being  made  to  address 
the  inequity. 

That  needs  to  change,  and  there 
are  ways  to  change  it.  There’s  a  lot 
of  buzz  about  equal  pay  audits  in 
the  U.K.,  where  the  percentage  of 
females  in  the  IT  profession  has 
declined  from  27%  in  1997  to  16%  to¬ 
day,  according  to  Intellect,  a  U.K.  IT 
trade  association.  An  Intellect  survey 
published  in  May  of  this  year  found 
that  80%  of  women  working  in  IT 
felt  that  an  equal  pay  audit  should  be 
compulsory. 

The  IT  sector  needs  to  champion 
the  cause  of  equal  pay  audits  in 
the  U.S.,  where  the  percentage  of 
women  in  IT  has  also  been  drop¬ 
ping  steadily  over  the  past  decade. 

If  we’re  lucky,  that  effort  might  help 
stem  the  damaging  loss  of  women 
from  this  profession. » 
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WHILE  THE  naysayers 
were  still  calling 
for  Microsoft  not 
to  ship  Windows  Vista  until 

sometime  in  the  spring  of  2007,  Mi¬ 
crosoft  announced  that  it  is  defini¬ 
tively  on  track  to  deliver  Vista  this 
year  to  business  users  and  in  January 
2007  for  everyone  else.  What  does 
this  mean  for  you? 

Well,  Vista  is  not  something  that  can 
be  ignored,  and  every  organization  is 
going  to  have  to  come  up  with  a  policy 
for  Vista  deployments  pretty  soon  (or 
end  users  are  just  going  to  take  mat¬ 
ters  into  their  own  hands). 

When  Microsoft  launched  Windows 
95, 1  estimated  that,  between  Microsoft 
and  all  its  partners,  about  $500  million 
would  be  spent  on  marketing.  This 
time,  it’s  likely  to  be 
well  north  of  $1  billion 
spent  in  an  effort  to 
get  end  users  and  IT 
professionals  on  board 
with  the  migration. 

When  I  look  at  it,  I 
see  four  major  things 
that  are  compelling 
about  Vista  and  four 
big  issues  with  migra¬ 
tion.  Here’s  what  to 
look  forward  to  and 
what  to  watch  out  for. 

What’s  Hot 

improved  reliability  and 
security.  Windows  XP 
was  a  good  operating 
system,  but  let’s  face 
it  —  five  years  ago, 
no  one  foresaw  the 
security  and  reliability  problems  that 
would  come  to  plague  PCs.  Microsoft 
has  learned  a  lot  since  the  launch  of 
XP,  and  it  shows.  Vista  is  much  more 
stable  and  secure  than  any  previous 
version  of  Windows. 

Protected-mode  Internet  Explorer.  One 
of  the  biggest  vulnerability  points  has 
been  Microsoft’s  IE  browser.  While 
the  just-released  IE7  addresses  a  lot  of 
security  issues,  IE7  running  on  Vista 
takes  things  to  the  next  level.  Run¬ 
ning  in  protected  mode,  the  browser 
is  totally  isolated  from  the  rest  of 
the  operating  system  and  actively 
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DO  YOUR  CUSTOMERS,  EMPLOYEES  AND 
INVESTORS  DEMAND  THAT  YOUR  BUSINESS  BE 
AVAILABLE  24/7  —  WITHOUT  INTERRUPTION? 


No  one  wants  business  interruptions.  In  fact,  a  recent 
IDC  study*  shows  that  organizations  are  looking  to  reduce 
total  downtime— planned  and  unplanned— by  53%  in  the 
four-year  period  ending  in  2007.  Easier  said  than  done, 
right?  Especially  when  you’re  faced  with  three 
constant  challenges: 

■  IT  downtime  targets  keep  getting  more  aggressive; 

■  Budget  constraints  continue  to  impact  your  ability 
to  address  these  targets;  and 

■  The  trade-off  always  seems  to  involve  giving  up 
flexibility  and  control. 

Information  Availability:  A  New  Way 
of  Looking  at  Cost-Effectively 
Managing  Risk 

You  want  your  information  available  where,  when  and  how 
you  need  it— and  that’s  not  an  easy  task.  You  have  critical 
applications  that  must  be  “always  on”  and  can  never  go 
down,  second-tier  applications  that  need  to  be  in  an 
“always  ready”  mode  to  be  brought  back  up  quickly  if 
they’re  interrupted,  and  less  time-sensitive  applications 
that  have  a  lower  impact  on  the  business  and  can  be 
recovered  with  a  tape-based  recovery  solution  at  a 
secondary  site. 


And  you  want  flexibility.  This  means  not  having  to  invest, 
build  and  maintain  a  redundant  data  center  yourself, 
not  yielding  full  control  of  your  IT  environment  to  a  third 
party,  and  not  being  forced  to  standardize  on  a  single 
platform.  Plus,  you  want  this  flexibility  at  a  cost  that 
doesn’t  exceed  your  total  IT  budget. 

How  can  a  business  achieve  these  levels  of  uptime  and 
flexibility?  It’s  called  Information  Availability.  SunGard 
defines  this  as  “keeping  people  and  information 
connected— no  matter  what.”  And  most  important, 
you’re  always  in  control— you  determine  and  pay 
only  for  the  level  of  Information  Availability  you  need. 

Information  Availability  and 
Disaster  Recovery 

Not  all  systems  and  applications  are  equally  important- 
some  are  critical  and  some  are  less  time  sensitive.  SunGard 
also  knows  that  many  businesses  require  a  solution  that  is 
somewhere  in  between  “always  on”  and  “always  ready.” 

For  these,  we  can  show  you  how  to  achieve  a  higher  level 
of  availability  with  our  new  AdvancedRecoverySM  solutions. 


Introducing  AdvancedRecoverySM 

Advanced  Recovery  encompasses  three  essential  elements— accurate  and  up-to-date  data  together  with  the  systems  and  workplace 
necessary  for  your  employees  to  use  that  data.  This  combination  of  replicated  or  vaulted  data  and  recovery  is  available  across  more 
than  30  platforms,  enabling  a  precise  match  with  nearly  any  type  of  custom  system  you  may  be  using,  now  or  in  the  future.  Most 
Advanced  Recovery  solutions  come  with  built-in  access  to  SunGard’s  customer  portal,  MySunGard.com,  so  that  you  can  securely 
monitor  your  equipment  and  data  during  regular  production  or  a  disaster  situation. 


How  Advanced  Recovery”  Works 


Automated  Backup  and  Quicker  Recovery  with  Vaulting 

AdvancedRecovery  with  Vaulting  provides  you  with  continuous  automated  data  backup  to  a  secure  SunGard  facility,  cutting 
back  on  the  need  to  rely  solely  on  tape  for  backup  and  recovery.  This  is  a  great  solution  for  less-than-critical  data  that  still 
needs  to  be  accessible  during  a  recovery.  AdvancedRecovery  with  Vaulting  gives  your  business  a  recovery  solution  that’s 
quicker  than  a  tape  recovery,  while  providing  your  employees  a  safe,  off-site  location  to  utilize  the  data  in  the  event  your 
facilities  are  unavailable. 


Primary  Data  Center 
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'Vaulting  servers  must  have  a  software  agent  installed 


Utilize  Your  Most  Critical  Applications,  Even  in  the  Event  of  a  Disaster 

AdvancedRecovery  with  Server  Replication  provides  users  of  BlackBerry®,  Microsoft®  Exchange  and  SQL  Server  Database 
servers  a  safe,  off-site  place  to  store  and  manage  new,  revised  and  deleted  data.  So  at  time  of  disaster,  you  can  take 
advantage  of  a  failover  recovery  that  optimizes  the  recovery  time  and  point  objectives  set  by  your  business.  Employees 
located  at  an  end-user  data  center  can  then  access  the  data  from  the  secure  servers,  located  at  a  SunGard  facility,  and 
continue  with  normal  business  operations.  After  your  primary  location  is  back  up  and  running,  newly  created  data 
can  then  be  failed  back,  ultimately  helping  to  reduce  the  risk  of  critical  data  being  lost  during  a  disaster. 
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‘Servers  must  have  software 
and  management  agents  installed. 


Fallback 
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‘Servers  must  have  software 
and  management  agents  installed. 


Tailored  to  Your  Business 

AdvancedRecovery  with  Storage  Replication  provides  companies  with  multiple  server  platforms,  and  a  safe,  off-site  place 
to  store  and  manage  new,  revised  and  deleted  data.  System  availability  is  improved  by  mirroring  critical  data  to  a  remote 
SunGard  facility.  If  the  data  is  needed  for  recovery,  a  storage  system  with  the  mirrored  data  can  be  connected  quickly  to 
SunGard  processors,  enabling  fast  resumption  by  employees  located  at  an  end-user  recovery  center.  AdvancedRecovery 
with  Storage  Replication  is  also  an  ideal  solution  for  companies  that  need  to  meet  stringent  regulatory  requirements  or 
have  significant  transactional  business  records. 


SunGard  Data  Center  -  Option  A 


Covering  Current  and  Legacy  Platforms 

AdvancedRecovery  with  iSeries  Replication  provides  the  missing  piece  to  recover  your  legacy  or  current  AS/400,  iSeries  or 
i5  servers.  A  SunGard-owned  iSeries  server  is  utilized  as  a  data  replication  repository,  enabling  the  replication  of  your  data 
to  a  safe,  off-site  location  without  your  having  to  invest  in  additional  equipment.  During  an  unplanned  event,  the  data 
is  then  made  available  to  employees  working  at  a  SunGard  end-user  recovery  center. 


SunGard 

Data  Center 

*  IDC  White  Paper  sponsored  by  SunGard,  “Optimizing  Business  Performance  Requires  Optimizing  Information  Availability  Investments,”  #202391 ,  July  2006. 

SUNGARD  is  a  registered  trademark  of  SunGard  Development  Corp.,  and  KEEPING  PEOPLE  AND  INFORMATION  CONNECTED®  and  Advanced RecoverySM 
are  trademarks  of  SunGard  Availability  Services  LP;  Microsoft®  Exchange  is  a  registered  trademark  of  Microsoft  Corporation;  Blackberry  is  a  registered  trademark 
of  Research  in  Motion  Limited;  IBM,  AS/400,  iSeries  and  i5  are  trademarks  or  registered  trademarks  of  IBM;  all  other  trade  names  are  trademarks  or  registered 
trademarks  of  their  respective  holders. 


Eliminating  the  Limitations 

For  more  than  28  years  and  through  more  than  2,100 
recovery  situations,  SunGard  has  delivered  a  100% 
success  rate.  SunGard’s  new  AdvancedRecovery™ 
solutions  take  recovery  to  the  next  level,  providing 
even  greater  precision  in  your  recovery  time-frames, 
locations  and  data  points. 

We’re  constantly  evaluating  new  capabilities  to  meet 
your  rapidly  changing  business  requirements.  Today 
you  may  want  the  ability  to  recover  critical  data. 
Tomorrow  you  may  want  virtualization  techniques  so 
that  if  your  entire  data  center  disappears,  SunGard  has 
the  snapshots  to  quickly  re-create  it.  Our  Information 
Availability  and  AdvancedRecovery SM  solutions  are 
designed  to  grow  with  your  business. 


With  a  greater  degree  of  precision  and  uncommon 
flexibility,  you  can  be  confident  that  SunGard  has  you 
covered,  wherever  and  whenever  you  need  us.  Best 
of  all,  our  economies  of  scale  can  significantly  reduce 
your  expenses,  allowing  you  to  achieve  the  best 
possible  solution  for  your  specific  needs  at  a  lower 
total  cost  of  ownership  than  an  in-house  solution. 


SUNGARD’  SE2 

Availability  Services  Connected ,® 

680  East  Swedesford  Road,  Wayne  PA  19087 
800-468-7483  |  www.availability.sungard.com 


Get  the  facts.  Visit  www.availability.sungard.com/MasteringRecovery 

to  download  a  free  copy  of  the  book  Mastering  Recovery. 
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protects  against  malicious  code.  This 
alone  is  worth  the  price  of  admission. 

Aero  Glass.  Computers  on  TV  never 
run  XP;  they  run  slick-looking  user  in¬ 
terfaces  (but,  alas,  draw  text  on-screen 
as  if  it’s  moving  at  300  baud,  with  an¬ 
noying  sound  effects).  It’s  mostly  eye 
candy,  but  it’s  really  nicely  done  eye 
candy.  Vista’s  user  interface  is  actually 
pretty  slick  and  might  even  look  good 
on  CSI.  Reverting  to  XP  after  using 
Vista  with  the  all  of  the  Aero  elements 
enabled  is  a  chore.  This  is  how  comput¬ 
ers  should  look  in  the  21st  century. 

Media  centricity.  Media  is  a  first-class 
citizen  in  Vista.  Tight  integration 
with  Windows  Media  Player  and  the 
Windows  shell  make  it  really  easy  to 


browse,  navigate,  tag  and  play  all  the 
content  that’s  important  to  you.  Music, 
pictures  and  video  all  work  just  the 
way  you  think  they  should. 

What’s  Not 

Gratuitous  Ul  changes.  I  love  the  user  in¬ 
terface,  but  I  have  a  lot  invested  in  the 
old  Windows  experience,  and  some  of 
the  changes  just  make  no  sense  to  me.  It 
also  seems  that,  given  the  size  of  some  of 
the  targets  you  have  to  home  in  on  with 
your  cursor,  Microsoft  is  hiring  a  lot  of 
young  workers  who  have  great  eyesight 
and  use  high-resolution  monitors. 

Performance.  All  this  goodness 
comes  at  a  price.  While  most  features 
are  enabled  to  some  degree  on  stock 


PCs,  older  machines  just  won’t  be  up  to 
snuff.  If  you  want  to  run  the  latest  and 
greatest  with  all  UI  features  enabled, 
you’re  going  to  need  an  upgrade.  Older 
laptops  in  particular  are  unlikely  to  be 
able  to  run  Vista  well  with  all  the  UI 
stuff  turned  on. 

Compatibility.  This  is  not  a  new  prob¬ 
lem,  but  Vista  will  confront  business  us¬ 
ers  for  the  first  time  in  a  long  while  with 
major  backward-compatibility  issues.  In 
general,  drivers  and  low-level  utilities 
will  be  the  worst  hit,  but  all  critical  ap¬ 
plications  will  need  to  be  tested  careful¬ 
ly  to  see  what  works  and  what  doesn’t. 

Cost.  There’s  more  to  the  cost  of  mi¬ 
gration  than  the  price  of  the  operating 
system.  Installation,  testing,  hardware 


and  software  upgrades  have  to  be  fac¬ 
tored  in.  That  means  wholesale  migra¬ 
tions  are  going  to  be  costly. 

Bottom  Line 

There’s  a  lot  to  like  in  Vista.  While 
most  organizations  will  likely  be  best 
served  by  a  phased  migration  over 
time,  many  users  will  be  able  to  benefit 
immediately.  Either  way,  Vista  is  on 
the  short-term  horizon,  and  it’s  best  to 
start  planning  now,  before  the  main 
consumer  launch  early  in  2007. » 

WANT  OUR  OPINION? 

OMore  columnists  and  links  to  archives  of  previous 
columns  are  on  our  Web  site: 

www.computerworld.com/columns 
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Mmm,  Multiplexing 

I  USE  A  quad-display  system 
(the  fourth  display  being  a  pro¬ 
jector  for  movies),  and  even  if  my 
girlfriend  finds  me  insane,  I  plan  on 
buying  six  19-in.  LCD  screens,  with 
add-on  USB  touch  panels  (along 
with  pen  tablet  and  voice-activated 
mic).  So  I’m  deeply  aware  of  the 
scalability  of  the  GUI  [“GUI  Gets  a 
Makeover,"  Technology,  Sept.  25], 
Luckily,  most  applications  have 


screen-position  memory. 

For  instance,  Photoshop  opens 
the  blank  canvas  on  Screen  1 
and  the  palettes  on  Screen  2, 
while  Word  opens  on  Screen  3. 
But  imagine  having  Outlook  on 
Screen  4,  FrontPage  on  Screen 
5  and  The  Simpsons  on  Screen  6 
-  mmm,  six  screens! 

Martin  Doucet 
Project  manager, 

Les  Editions  VAIXE,  Montreal, 
info@vaixe.com 


Since  You  Can’t  Get 
There  From  Here 

VIRGINIA  ROBBINS’  simple 
analogy  [“Cooking  Up  Great  IT,” 
Opinions,  Sept.  18]  comparing  Gor¬ 
don  Ramsay's  service  improvement 
techniques  for  restaurants  to  the  job 
of  turning  around  IT  departments 
contained  many  truths,  especially 
regarding  communication  and  the 
need  to  look  at  things  from  an  exter¬ 
nal  viewpoint. 

As  a  former  CIO,  I  have  often 
thought  of  another  analogy:  Two 
tourists  were  lost  in  the  Irish  country¬ 
side.  Eventually,  they  came  upon  a 
wizened  Irishman.  “Could  you  please 
help  us,  sir,  and  direct  us  to  the  town 
of  Kerry?”  they  asked.  “Oh,”  replied 
the  man,  “if  it’s  Kerry  you'll  be  want¬ 
ing,  then  I  wouldn’t  start  from  here.” 

When  handed  the  IT  reins  with  the 
objective  of  implementing  service 
improvement,  I’ve  often  thought 
that,  given  the  chance,  “I  wouldn't 
start  from  here”! 

Rupert  Dodds 

Partner,  KPMG,  Wellington, 

New  Zealand,  rdodds@kpmg.co.nz 


Graylisfing  Spam 

YOUR  ARTICLE  “Spam  Fighters 
Losing  Ground"  [ Computerworld 
com,  Sept.  21]  misses  an  effective 
but  underused  spam-fighting 
technique:  graylisting,  or  tar  pits.  It 
increases  the  cost  of  sending  spam 
without  tying  up  the  resources  of 
the  receiving  mail  server.  It  works 
better  than  filtering  because  it 
works  on  the  sender  behavior  rather 
than  the  content.  If  every  busy  mail 


server  used  graylisting  to  tar-pit 
spam  senders,  there  would  be  a  lot 
less  junk  to  filter.  Unfortunately  for 
antivirus  vendors,  you  can't  gener¬ 
ate  cash  flow  from  it  -  and  so  it  will 
never  be  widely  promoted. 

Louis  Bertrand 

Professor,  Durham  College  of 
Applied  Arts  and  Technology, 
Oshawa,  Ontario 


I’m  Surfing,  but  I’m 
At  My  Desk,  Right? 

WHILE  THERE  are  certainly 
some  abusers  [“Employers 
Crack  Down  on  Personal  Net  Use," 
Computerworld.com,  Sept.  26],  for 
the  most  part,  it  is  simply  that  em¬ 
ployers  now  have  a  method  of  mea¬ 
suring  what  used  to  happen  in  a  non- 
technological  manner.  Where  before 
people  would  walk  to  someone  else's 
desk  or  use  the  phone  to  talk,  they 
now  use  e-mail  or  IM.  Before,  they 
might  peruse  paper  catalogs  at  work: 
now  they  use  a  Web  store.  Those 
who  might  have  used  a  portable  TV 
or  radio  now  have  streaming  content. 
Mike  RathweN 
Jersey  City,  N.J. 


Restrictions  on  the  use 

of  the  Web  at  work  will  go  the 
way  of  the  restrictions  on  personal 
phone  use  that  were  common  de¬ 
cades  ago.  Young  people  who  have 
grown  up  with  the  Web  will  demand 
unrestricted  access.  Organizations 
need  to  focus  on  employee  produc¬ 
tivity,  not  enforcing  an  Orwellian 
environment. 

Ian  Evans 
San  Jose 


How  Do  You  Control 
Charlie,  the  CEO? 

FRANK  HAYES  [“Control Char¬ 
lie,”  Frankly  Speaking,  Sept.  25] 
has  hit  the  nail  directly  on  its  logical 
little  head  concerning  controlling 
the  introduction  of  malware  into 
corporate  networks:  When  “Charlie” 
does  something  stupid,  everyone 
else  should  experience  an  immedi¬ 
ate  loss  of  access,  and  Charlie’s  ac¬ 
tions  should  be  clearly  and  publicly 
identified  as  the  cause.  In  a  free 
market  where  everyone  had  equal 


status  and  made  rational  choices, 
this  would  work  perfectly. 

But  a  company  is  basically  a 
primate  troop  with  a  well-defined 
hierarchy.  The  correlation  between 
dominance  and  intelligence  in 
primates  is  zero,  if  not  actually 
negative. 

What  happens  when  Charlie  is  a 
high-ranking  but  stupid  manager? 
The  result  depends  upon  the  spe¬ 
cific  dominance  hierarchy  of  the 
company  involved,  but  it  is  much 
more  likely  that  a  low-ranking  mem¬ 
ber  of  the  IT  department  would  be 


punished  than  Charlie. 

At  most  companies,  IT  would 
probably  be  forbidden  from  shutting 
down  access  when  Charlie  does 
something  stupid  and  forbidden 
from  disclosing  that  Charlie  was 
the  stupid  chimp  who  caused  the 
outage  in  the  first  place.  Hayes’  so¬ 
lution  is  a  wonderful  one  that  would 
nevertheless  require  skilled  and 
dedicated  political  maneuvering. 

As  always,  there  are  no  technology 
problems,  only  primate  problems. 
Carl  Minie 

Software  developer, 

Salt  Lake  City 


Grandma  Networks 

THE  ARTICLE  “Five Reasons 
You  Need  a  New  Approach  to 
Antivirus  Security"  [Computerworld.- 
com,  Aug.  24]  quotes  Jason  Bradley 
as  saying,  “How  does  grandma 
know  what  the  registry  is?” 

Watch  it.  This  grandmother  of 
three  is  a  network  specialist,  and 
you’d  better  believe  she  knows  what 
a  registry  is.  Stop  stereotyping. 

Vicki  Wood 
Network  specialist, 

Union-Endicott  Central 
School  District,  Endicott,  N.Y. 

COMPUTERWORLD  welcomes  com- 
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ments  from  its  readers.  Letters  will 
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letters  editor,  Computerworld.  PO  Box 
9171, 1  Speen  Street,  Framingham, 

Mass.  01701.  Fax:  (508)  879-4843. 

E-mail:  letters@computerworld.com. 
Include  an  address  and  phone  num¬ 
ber  for  immediate  verification. 
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.INFRASTRUCTURE  LOG 


_DAY  28:  These  slow,  inefficient  boxes  don’t  have  enough 
power  to  run  my  high-end  business  apps.  They  don’t  have 
enough  power  to  do  anything  except  crash. 

.Need  sleep.  Will  try  to  dream  that  I  am  I.T.  King  of  a 
planet  that  only  produces  really  powerful  servers. 

.DAY  30:  I’ve  got  it:  the  IBM  System  x™  with  the  AMD 
Opteron™  Processor.  It  has  more  power  and  more  efficiency 
than  I  ever  imagined  in  a  standards-based  server.  IBM 
Xcelerated  Memory  Technology™  can  let  us  access  data  up 
to  15  percent  faster  than  other  servers  for  maximized 
performance.*  I  can  finally  sleep  in  my  own  bed  again. 

_I  have  taken  back  control.  I  am  Ned,  benevolent  I.T. 
King  of  this...uh,  data  center. 


IBM.COM/TAKEBACKGONTROL/X 


11.13.06 


Consortium  for  a  Cure 

The  National  Cancer  Institute  developed  an  open- 
source,  open-access  information  network  to  speed 
progress  on  cancer  research  and  care.  The  grid 
computing  project  was  named  a  Computer-world 
Honors  Program  award  winner  this  year.  PAGE  36 


SECURITY  MANAGER’S  JOURNAL 

Tackling  Security  for  Mobile  CRM 

A  new  customer  relationship  manage¬ 
ment  system  means  Mathias  Thurman 
faces  a  whole  new  round  of  drawing  up 
security  requirements.  PAGE  34 


OPINION 

How  to  Avoid  Getting 
Ransom  Notes 

Bruce  Hoard  says  you  can  thwart  cyberex¬ 
tortionists  by  deploying  robust  security  that 
can  fend  off  threatened  attacks.  PAGE  38 


New  services  such  as 

GoToMyPCand  LogMeln 

are  taking  the  hassles  out  of 
remote  access  to  employee 

PCs  By  Sue  Hildreth 


IKE  SISYPHUS  rolling 
his  rock  up  the  moun¬ 
tain  over  and  over,  IT 
support  professionals 
deal  with  the  same 
end-user  support  is¬ 
sues  day  after  day. 
And  when  it  comes 


to  supporting  users  at  remote  locations, 
those  problems  just  seem  to  multiply. 
Far-flung  users  suffer  from  shaky  Inter¬ 
net  connections,  misconfigured  VPN 
clients,  lost  security  tokens,  forgotten 
passwords,  virus-ravaged  laptops  and, 
of  course,  children  who  like  to  “modify” 
Mom  and  Dad’s  settings. 


A  sampling  of  vendors  offering 
remote  access  services: 

Citrix  Online,  a  division  of  Citrix 
Systems  Inc.,  Santa  Barbara.  Calif, 

LogMeln  Inc.,  Woburn.  Mass. 

01  Communique  Laboratory  Inc., 

Mississauga,  Ontario 

Laplink  Software  Inc.,  Bellevue,  Wash. 
Sentillion  Inc.,  Andover,  Mass. 

WebEx  Communications  Inc., 

Santa  Clara,  Calif. 


With  more  employees  than  ever 
working  away  from  the  office,  at  home 
or  on  the  road,  supporting  remote  end 
users  is  consuming  more  and  more 
precious  IT  resources. 

To  address  this  problem,  a  handful 
of  companies  —  led  by  Citrix  Online, 
a  division  of  Citrix  Systems  Inc.,  and 
LogMeln  Inc.  in  Woburn,  Mass.  —  are 
taking  a  different  approach  to  remote 
access.  It’s  one  that  doesn’t  use  a  vir¬ 
tual  private  network  and  may  make  life 
simpler  for  end  users  and  for  IT  sup¬ 
port  staffers. 

Under  the  new  concept,  the  user’s  re¬ 
mote  desktop  or  laptop  isn’t  connected 
to  corporate  servers.  Instead,  the  re¬ 
mote  user  is  connected  to  his  PC  back 
at  the  office,  with  all  of  the  same  files, 
applications  and  desktop  icons.  This 
is  accomplished  mainly  with  a  Web 
browser  and  screen-sharing  technolo¬ 
gies  like  those  that  have  been  used  for 
remote  support  and  online  presenta¬ 
tions.  Even  a  PC  in  an  airport  kiosk  or 
at  a  friend’s  house  is  sufficient  to  give  a 
user  full  access  to  his  office  desktop. 

For  both  busy  remote  users  and  over¬ 
worked  IT  departments,  the  simplicity 
of  these  services  can  be  a  godsend. 

Mississippi  Baptist  Health  Systems 
Inc.  in  Jackson,  Miss.,  for  instance,  had 
been  providing  remote  users  with  VPN 
access  to  the  hospital’s  systems.  But  it 
wasn’t  an  ideal  solution  for  either  staff¬ 
ers  or  users.  “The  complexity  of  sup- 

Continued  on  page  32 
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Introducing  Intel®  vPro"  technology. 

Greater  security  built  in  to  your  desktop  fleet. 

Intel  vPro"’  technology  is  more  than  just  a  new  processor.  It's  an  integrated  set  of  new  technologies 
designed  to  work  together.  Your  ability  to  manage  your  entire  enterprise  is  built  in.  So  is  your  ability  to 
remotely  heal  PCs  even  when  powered  down.  Built  around  the  extraordinary  performance  of  the  new 
Intel . Core'"2  Duo  processor,  Intel  vPro  technology  adds  functionality  to  leading  network  security  software. 

To  download  the  Intel  vPro  technology  whitepaper,  go  to  intel.com/go/control. 
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Continued  from  page  30 
porting  a  VPN  is  great,  and  many  is¬ 
sues  have  to  do  with  end-user  training,” 
says  Michael  Long,  director  of  network 
services. 

So,  three  years  ago,  when  the  idea  of 
subscribing  to  Citrix  Online’s  GoTo- 
MyPC  service  came  up,  the  hospital 
jumped  at  it.  Now,  more  than  100  Bap¬ 
tist  Health  administrators  and  medical 
professionals  use  the  service.  Users  log 
onto  the  GoToMyPC  Web  site,  which 
then  contacts  each  individual’s  com¬ 
puter  —  either  at  the  hospital  or  in  a 
physician’s  office  —  and  opens  an  en¬ 
crypted  session  between  the  two. 

“It’s  a  familiar  environment,  and 
they  don’t  have  to  launch  anything  on 
the  client.  It’s  very  easy  for  them  to 
use,”  says  Long. 

Unlike  a  VPN,  which  requires  that 
software  be  loaded  onto  the  client  de¬ 
vice  and  configured,  remote  desktop 
services  just  need  software  on  the  host 
PC.  A  Java  applet  is  typically  down¬ 
loaded  onto  the  client  after  the  user 
logs  into  the  service,  and  that  applet 
communicates  with  the  host  desktop. 
Once  logged  on,  the  user  has  access 
to  all  applications  available  from  the 
desktop  —  local  ones  as  well  as  server- 
based  applications  and  databases. 

The  Hurricane  Factor 

Ease  of  use  and  lower  IT  support  costs 
aren’t  the  only  benefits  driving  this 
market.  Some  organizations  also  see 
remote  desktop  access  services  as  a 
way  to  reduce  the  number  of  laptops 
floating  around  with  sensitive  corpo¬ 
rate  data  stored  on  their  hard  drives. 
Also,  the  services  offer  ready-to-go 
business  continuity  plans  in  case  of  a 
disaster  or  other  emergency  that  pre¬ 
vents  workers  from  getting  to  the  office. 

“I  call  it  the  perfect  storm  of  benefits, 
and  I  expect  the  marketplace  for  this  to 
grow  on  the  order  of  two  to  three  times 
the  rate  of  the  PC  market  in  general,” 
says  Dana  Gardner,  an  analyst  at  Inter¬ 
arbor  Solutions  LLC,  a  Gilford,  N.H.- 
based  research  and  consulting  firm 
specializing  in  enterprise  software. 

“It’s  not  a  brand-new  market,  but  it’s 
started  to  take  off  in  the  past  few  years,” 
says  IDC  analyst  Stacy  Sudan.  “Some 
companies  no  longer  want  employees 
to  take  laptops  on  the  road  for  security 
reasons.  And  it’s  also  being  offered  as  a 
business  continuity  option.” 

For  instance,  the  International  As¬ 
sociation  for  Exhibition  Management, 
a  Dallas-based  trade  group  with  3,500 
members,  turned  to  01  Communique 
Laboratory  Inc.’s  I’m  InTouch  service 
so  staffers  could  work  from  home  when 
Hurricane  Rita  threatened  in  2005. 
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“After  Katrina  hit,  everyone  was 
scared.  So  when  Rita  started  coming, 
we  bought  licenses  so  everybody  could 
work  from  home  for  a  day  or  two,”  says 
Chief  Financial  Officer  Scott  Stanton. 
“It’s  part  of  our  disaster  plan  now.” 

The  Johns  Hopkins  Bloomberg 
School  of  Public  Health  in  Baltimore 
also  found  remote  access  to  PCs  help¬ 
ful  during  a  natural  disaster  —  a  snow 
and  ice  storm  that  left  30  inches  of 
snow  on  the  ground. 

“We  had  one  professor  who  needed 
to  make  grant  deadlines,  and  she  was 
able  to  do  all  her  work  remotely,”  says 
Ross  McKenzie,  director  of  IS  at  the 
school.  “It  would  have  been  a  support 
nightmare  if  we’d  had  to  go  around  and 
set  up  VPNs  at  everyone’s  houses.  This 
was  a  nice,  clean  solution.” 

For  some  organizations,  the  services 
help  the  IT  department  work  with 
highly  distributed  operations.  The 
IT  staff  at  Meineke  Car  Care  Centers 
Inc.,  based  in  Charlotte,  N.C.,  uses  the 
LogMeln  service  to  gain  access  to  PCs 
at  hundreds  of  automotive  centers  na¬ 
tionwide  —  without  long  drives  to  visit 
each  location,  according  to  technical 
support  specialist  Matt  Langley. 

At  Kettering  Medical  Center  Net¬ 
work  in  Dayton,  Ohio,  Sentillion  Inc.’s 
vThere  remote  access  software  lets 
off-site  physicians,  students  and  ad¬ 
ministrators  tap  into  their  hospital  PCs. 


Market  Snapshot 

IDC’s  August  study  of  the  relatively 

young  market  for  remote  access 

services  concludes  the  following: 

Citrix  Online  dominates  the  market, 
with  a  90.8%  share,  because  of  its 
GoToMyPC  product. 

LogMeln,  the  next-largest  vendor, 
has  seen  sales  of  its  product  grow  and 
is  rapidly  gaining  attention  with  its 
successful  free  version,  LogMeln  Free. 

Currently,  remote  access  services 
are  most  popular  with  the  prosumer 
and  small  and  medium-size  business 
markets.  But  vendors  are  now  targeting 

the  corporate  world  as  well. 

*  *  *  ****** 

The  technology  could  become 
popular  at  companies  leery  of  letting 
employees  travel  with  laptops  that 
contain  confidential  information. 

The  services  could  be  used  for  busi¬ 
ness  continuity  purposes,  it  disaster 
strikes  and  employees  can't  make  it  into 
.the  office..  , 

Two  barriers  to  adoption:  Many  com¬ 
panies  already  have  VPNs,  and  laptops  are 
replacing  desktops  at  some  companies. 


For  many  people,  being  mobile  means 
using  a  handheld  device,  so  remote  ac¬ 
cess  vendors  such  as  LogMeln,  Citrix  Online 
and  01  Communique  support  handhelds.  But 
how  well  does  a  tiny  screen  work  for  viewing 
a  big  desktop? 

“The  big  challenge  is  how  to  pan  around  a 
PC  desktop  with  a  handheld,"  notes  Gary  Chen, 
an  analyst  at  Yankee  Group  Research  Inc.  He 
says  he  doubts  handhelds  will  be  popular  de- 

Kettering  Medical  has  220  applications 
and  50  facilities  in  the  Dayton  area,  so 
remote  access  is  a  major  issue,  says  Di¬ 
rector  of  Technology  Bob  Burritt. 

Good  Grades  for  Security 

Analysts  and  users  cite  few  security 
concerns  with  the  remote  services.  Most 
of  the  service  providers  offer  several 
layers  of  security,  including  encryption, 
certificates  and  multiple  passwords. 

The  connection  from  the  remote  de¬ 
vice  to  the  service,  and  from  the  service 
to  the  host  desktop,  is  encrypted.  And 
two  or  three  passwords  are  normally 
required  to  gain  access  to  a  user’s  work 
applications  —  one  password  to  log  into 
the  service,  another  to  get  to  the  PC 
and  a  third  for  access  to  the  corporate 
network.  Some  services  use  certificates 
to  verify  their  own  servers’  identities 
to  guard  against  a  hacker  attempting  to 
pose  as  a  server  to  a  remote  user  —  a  so- 
called  man-in-the-middle  attack. 

Corporate  versions  of  these  services 
also  provide  administrative  and  secu¬ 
rity  functions  such  as  the  ability  to  lock 
out  remote  printing  or  file  transfers, 
one-time  passwords  for  users  who  may 
be  using  public  PCs,  access  restrictions 
and  two-factor  authentication. 

“With  the  [GoToMyPC]  management 
console,  we  can  custom-configure 
[security  settings],  force  password 
changes,  manage  the  log  and  see  where 
access  is  coming  from,”  says  McKenzie. 

Because  many  Johns  Hopkins  em¬ 
ployees  travel  to  countries  without  reli¬ 
able  Internet  connections,  GoToMyPC 
enables  them  to  access  desktop  files  and 
run  statistical  analysis  on  school  com¬ 
puters  from  PCs  in  Internet  cafes  or  any¬ 
where  else.  In  addition,  McKenzie  says, 
many  faculty  members  work  from  home 
using  the  service,  and  the  information 
systems  department  relies  on  it  to  keep 
tabs  on  the  status  of  university  servers. 
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vices  for  accessing  desktops  remotely,  though 
they  may  be  useful  in  certain  situations,  such 
as  when  the  user’s  laptop  isn’t  available. 

Ross  McKenzie,  director  of  IS  at  the  Johns 
Hopkins  Bloomberg  School  of  Public  Health, 
agrees  that  it’s  not  the  best  way  to  get  to  a 
desktop  application  but  thinks  it  has  great  value 
for  specific  uses. 

“There’s  certainly  some  applications  I 
wouldn’t  want  to  run  on  a  handheld,  because 
you’re  accessing  a  17-in.  monitor  with  a  4-in. 
screen,”  he  says.  “But  it  can  also  be  very  use¬ 
ful.  For  instance,  our  IS  people  use  them  to 
check  on  server  status  -  without  having  to  go 
back  to  their  desks  -  or  to  read  a  document 
remotely.  It's  a  part  of  the  overall  tool  bag." 

-SUE  HILDRETH 


The  only  real  security  issue  that 
Johns  Hopkins  has  encountered  in¬ 
volved  desktop  shortcuts.  An  employee 
discovered  that  his  roommate  had 
clicked  on  a  GoToMyPC  shortcut  and 
was  able  to  access  the  employee’s  work 
PC.  So  McKenzie  had  the  shortcut 
feature  disabled  for  all  users.  (Citrix 
Online  notes  that  while  it’s  possible  to 
create  a  shortcut  to  an  account,  it  isn’t 
possible  to  create  one  that  will  open  an 
encrypted  session  to  the  host  PC.) 

One  advantage  of  the  remote  ser¬ 
vices  is  that  they  negate  the  chance  of  a 
malware  infection.  Viruses  on  a  home 
PC  can’t  infect  the  corporate  comput¬ 
ers.  Likewise,  a  corporate  virus  can’t 
get  onto  the  remote  client  unless  the 
user  saves  an  infected  file  to  disk. 

All  in  all,  the  real  selling  points  for 
services  like  LogMeln  and  I’m  InTouch 
are  price  and  convenience.  According 
to  IDC’s  Sudan,  fees  typically  range 
from  $10  to  $20  per  PC  per  month,  pos¬ 
sibly  less  for  large-volume  deals. 

And  it  is  substantially  more  conve¬ 
nient  for  employees,  who  get  access  to 
everything  on  their  work  PCs,  and  for 
IT  workers,  who  don’t  have  to  hand¬ 
hold  users  to  set  up  VPNs  and  config¬ 
ure  e-mail  clients. 

Long  says  that  support  calls  from 
remote  users  plummeted  80%  to  90% 
after  Mississippi  Baptist  switched  to 
the  Citrix  Online  service.  That’s  a  lot 
of  IT  manpower  that’s  now  available 
for  other  projects,  he  notes. 

“It  pays  for  itself  in  resource  time,  if 
nothing  else,”  Long  says.  “With  the  VPN, 
we  sometimes  have  had  to  spend  several 
hours  with  end  users  initially  getting  it 
working.  With  this,  the  support  and  IT 
resource  costs  are  so  much  lower.”  » 


Hildreth  is  a  freelancer  specializing  in  en¬ 
terprise  software  and  services.  She  can  be 
reached  at  Sue.Hildreth@comcast.net. 
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should  be  ONE  CLICK  awa; 
so  do  we. 


Now  you  can  eliminate  user  frustration  and  get  the  most  from 
your  BI  investment. 


Cognos  8  Business  Intelligence  is  a  single  product  that  lets  users  move  seamlessly 
between  all  BI  capabilities  —  reporting,  analysis,  dashboarding  and  scorecarding. 

It  has  one  common,  browser-based  interface  that  makes  it  easy  to  learn  and  use. 
And  a  self-service  platform  that  lets  users  get  the  information  they  need. 

Without  navigating  complex  data  systems.  Or  relying  on  IT. 

In  short,  it’s  BI  that  works  the  way  users  think. 

Visit  www.cognos.com/oneclick  today. 
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Tackling  Security 
For  Mobile  CRM 

A  new  application  rollout  means  a  whole 
new  round  of  drawing  up  requirements  for 
our  security  manager.  By  Mathias  Thurman 


ANOTHER  enterprise 
application  made  its 
way  onto  my  radar 
screen  this  past 
week,  and  I’ve  been  busy  put¬ 
ting  together  a  plan  to  address 
security  for  it. 

To  speak  in  acronyms,  I’m 
moving  from  PLM  to  CRM. 
About  two  months  ago,  I  fin¬ 
ished  up  my  security  architec¬ 
ture  review  and  requirements 
for  a  product  life- 
cycle  management 
application.  The  PLM 
project  is  still  in  the 
development  phase, 
and  I  continue  to 
contribute  to  it  from 
time  to  time  to  ensure  that  my 
requirements  are  being  built 
into  the  application.  My  real 
work  with  PLM  will  start  in 
the  validation  phase,  when 
I’ll  conduct  an  audit  to  ensure 
that  my  requirements  have 
been  properly  addressed.  But 
for  the  moment,  I’m  not  doing 
much  on  the  PLM  project  and 
can  concentrate  on  CRM. 

CRM  stands  for  customer 
relationship  management.  Our 
main  goal  with  this  system  is 
to  improve  relationships  with 
our  customers  by  streamlining 
our  service  department’s  inter¬ 
actions  with  them.  Specifically, 
we  want  to  use  CRM  to  let  our 
service  engineers  accept  work 
assignments,  account  for  time, 
track  parts,  communicate  with 
co-workers  and  perform  other 
aspects  of  their  jobs. 

The  service  technicians 
have  been  using  a  homegrown 
tool  to  accomplish  these  activ¬ 
ities,  but  it  isn’t  very  intuitive 
or  efficient.  Built  years  ago, 
when  our  company  was  small, 
it  was  never  meant  to  be  an 
enterprise-class  tool.  Among 
its  problems  is  that  techni¬ 


cians  have  to  establish  a  vir¬ 
tual  private  network  session 
with  headquarters  to  access 
the  application  portal.  That’s  a 
serious  drawback,  since  many 
of  our  technicians  work  in 
fabrication  plants  operated  by 
our  customers,  whose  policies 
prohibit  them  from  bringing  in 
laptops.  In  addition,  many  of 
these  plants  don’t  have  Inter¬ 
net  access. 

So  our  CRM  proj¬ 
ect  will  include  a 
slight  twist  that  we 
are  calling  “mobil¬ 
ity.”  Besides  deploy¬ 
ing  a  CRM  back-end 
application,  we  will 
include  the  ability  for  certain 
portions  of  the  CRM  applica¬ 
tion  to  run  on  Research  In  Mo¬ 
tion  Ltd.’s  BlackBerry  phones. 

This  will  be  new  territory 
for  us  and  will  require  a  whole 
new  set  of  security  controls. 
We  currently  don’t  equip  any 
users  with  BlackBerry  devices. 

The  first  set  of  controls  is  re¬ 
lated  to  the  phones  themselves. 
BlackBerries  allow  you  to  con¬ 
figure  several  security-related 
features.  You  can  establish 
various  lengths  for  passwords, 
incorporate  time-outs,  lock 
phones  after  a  certain  number 
of  unsuccessful  attempts  to 
access  them,  and  enable  data 
encryption.  You  can  also  re¬ 
motely  disable  a  phone  if  it’s 
lost  or  stolen. 

Of  course,  each  of  these 
security  controls  has  a  hit  on 


Our  CRM 
project 

includes  a  slight 
twist  that  we  are 
calling  ‘mobility/ 


usability  and  productivity. 

For  example,  if  I  mandate  a 
nine-character  alphanumeric 
password  with  uppercase,  low¬ 
ercase  and  special  characters 
and  a  five-minute  time-out, 
users  will  complain,  since  in¬ 
putting  a  password  on  a  Black¬ 
Berry  device  isn’t  easy. 

Server  Requirements 

I  will  also  establish  a  general 
set  of  requirements  for  the 
BlackBerry  Enterprise  Server. 
For  example,  I  will  require 
that  the  server  be  placed  on 
a  separate  virtual  LAN  and 
mandate  certain  configura¬ 
tions  on  the  router  and  switch 
to  prevent  denial-of-service 
attacks.  I’ll  also  make  sure  that 
sufficient  logging  is  included, 
which  will  assist  with  incident 
response  should  we  detect  any 
unauthorized  use  or  cases  of 
intellectual  property  theft. 

To  allow  the  BlackBerry 
phones  to  run  the  CRM  ap¬ 
plication  and  talk  to  our  CRM 
back-end  servers,  we  are  using 
technology  from  Jersey  City, 
N.J.-based  Antenna  Software 
Inc.,  which  provides  mobile 
applications  specifically  de¬ 
signed  for  the  service  industry. 
I’ve  reviewed  Antenna’s  white 
papers  and  am  impressed  with 
the  security  of  its  offering.  But 
just  to  be  safe,  once  the  project 
team  has  created  design  docu¬ 
mentation,  I  will  review  it  to 
ensure  that  there  are  no  gaps. 

I’m  the  first  to  admit  when  I 
don’t  have  expertise  in  a  tech¬ 
nology,  and  security  for  mo¬ 
bile  devices  is  certainly  one  of 
those.  In  order  to  fully  address 
security  aspects  of  the  mobil¬ 
ity  phase  of  the  CRM  project, 

I  will  hire  a  contractor  to  help 
me  assess  the  infrastructure 
and  devise  a  set  of  policies, 
standards  and  guidelines  for 
the  phones,  the  BlackBerry 
Enterprise  Server,  the  Antenna 
infrastructure  and  employees’ 
use  of  the  phones.  Mobility  is 


probably  the  riskiest  aspect  of 
this  infrastructure,  since  more 
and  more  enterprise  applica¬ 
tions  will  surely  be  accessible 
via  the  phones.  For  example, 
we’ve  already  deployed  IP 
telephony  and  enabled  unified 
messaging.  The  more  applica¬ 
tions  that  are  accessible  on  the 
BlackBerries,  the  more  intel¬ 
lectual  property  and  sensitive 
data  will  be  exposed. 

I  will  also  need  to  focus  ef¬ 
forts  on  the  back-end  CRM  in¬ 
frastructure.  When  I  conduct¬ 
ed  my  assessment  of  the  PLM 
project  several  months  ago,  my 
deliverable  was  a  set  of  secu¬ 
rity  requirements.  I  like  to  cre¬ 
ate  fairly  generic  requirements 
so  that  the  documentation  and 
spreadsheets  for  future  appli¬ 
cations  can  be  built  from  them. 
This  practice  saves  time,  since 
most  enterprise  applications 
have  similar  security  require¬ 
ments.  For  example,  the  ability 
to  check  certain  types  of  docu¬ 
ments  in  and  out  may  apply  to 
many  applications. 

There  are  other  things  to 
look  into.  Encryption  of  data 
in  transit  and  at  rest  will  need 
to  be  evaluated.  I  will  want  the 
ability  to  monitor  certain  types 
of  activity,  such  as  log-ins  and 
log-outs.  We’ll  need  to  set  up 
authorizations  for  privileged 
access  and  set  parameters  for 
exception  reporting.  Then 
there  are  the  prudent  practices 
of  setting  up  role-based  access 
control  and  creating  separate 
VLANs  for  Web,  application 
and  database  servers. 

This  project  is  still  in  its 
infancy,  so  I  can’t  be  sure  yet 
that  I’ve  covered  all  the  bases. 
But  mobility  will  extend  the 
CRM  application  beyond  our 
internal  and  DMZ  environ¬ 
ments,  so  getting  it  right  is  es¬ 
sential.  If  this  isn’t  architected 
properly,  the  ramifications  of  a 
stolen  BlackBerry  phone  could 
be  very  embarrassing. » 


WHAT  DO  YOU  THINK? 

This  week’s  journal  is  written  by  a  real 
security  manager,  "Mathias  Thurman," 
whose  name  and  employer  have  been 
disguised  for  obvious  reasons.  Contact 
him  at  mathias_thurman@yahoo.com,  or 
join  the  discussions  in  our  security  blogs: 
computerworld.com/blogs/security 

To  find  a  complete  archive  of  our  Security 
Manager’s  Journals,  go  online  to 

computerworld.com/secjournal 


Security  Bookshelf 

Security  in  Computing 
(4th  Edition),  by  Charles 
P.  Pfleeger  and  Shari  Law¬ 
rence  Pfleeger 
(Prentice  Hall 
PTR,  2006). 

If  you  need  a 
midlevel  col¬ 
lege  textbook 
on  computer 
security  or  just  a 
decent  reference 
to  help  you  keep  up  to 
date,  you’ll  want  to  pick  up 
a  copy  of  this  title.  The  au¬ 
thors  start  out  by  describing 
some  of  the  most  prevalent 
issues  in  security,  then  zero 
in  on  areas  such  as  encryp¬ 
tion,  application  security, 
management  and  privacy. 
The  chapter  on  cryptogra¬ 
phy  is  a  good  refresher  on 
encryption  algorithms.  Each 
chapter  is  well  organized, 
and  there  are  quizzes  that  I 
found  very  challenging. 

-MATHIAS  THURMAN 

laptop  Buyer  Finds 
Sensitive  Data 

The  buyer  of  a  laptop  that 
Salt  Lake  City-based  Inter¬ 
mountain  Healthcare  Inc. 
had  scrubbed  and  then 
donated  to  a  local  charity 
discovered  a  file  on  the  hard 
disk  containing  person¬ 
ally  identifiable  information, 
including  Social  Secu¬ 
rity  numbers,  for  more  than 
6,000  current  and  former 
employees.  According  to 
the  Deseret  Morning  News, 
the  buyer  gave  the  laptop 
to  a  Utah  TV  station,  which 
informed  Intermountain  of 
the  near  breach.  The  com¬ 
pany  says  it  no  longer  uses 
Social  Security  numbers  to 
identify  employees,  and  it 
has  contracted  with  Dell  Inc. 
to  physically  destroy  hard 
disks  rather  than  scrub  them. 
However,  the  SANS  Institute 
notes  that  shipping  the  hard 
disks  to  Dell  puts  them  at 
risk  of  getting  lost,  which  has 
happened  to  backup  tapes  in 
several  high-profile  cases. 
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The  Science  of  CERTAINTY 


NO  SOFTWARE.  NO 
HARDWARE.  NO-ONE 
CAN  TOUCH  YOU. 


The  untouchables.  An  ever-growing  number  of 
15,000  organizations  across  80  countries  who  trust 
MessageLabs  to  keep  their  business  messaging  safe.  It’s 
hardly  surprising.  We  are,  after  all,  the  world’s  leading 
provider  of  managed  security  services. 

Only  MessageLabs  can  ensure  that  nothing  will 
harm  your  business.  No  viruses.  No  spam.  No  spyware. 
No  phishing  attacks.  No  inappropriate  content.  No 
information  loss. 

And  all  this  is  made  possible  through  a  service, 
not  software,  which  can  be  set  up  in  a  matter  of  minutes, 
and  never  stops  working  to  keep  threats  well  away  from 
your  network. 

But  this  is  only  part  of  what  makes  MessageLabs 
infallible  -  and  what  keeps  us  well  ahead  of  the  competition. 


We  call  it  The  Science  of  Certainty.  And  it  has  an 
unbeatable  formula: 

Start  with  the  fact  that  we  are  the  only  company 
who  can  provide  a  truly  integrated  security  solution  - 
covering  all  email,  web  and  1M  based  threats. 

Add  Skeptic™.  Our  unique,  predictive,  self- 
perpetuating  technology,  ft  learns  from  each  of  the 
billions  of  emails,  instant  messages  and  web  pages  it 
scans  every  day  and  reacts  instantly  to  any  danger. 

Take  away  complexity  and  the  need  to  update  any 
software.  (Our  services  are  delivered  via  the  Internet 
outside  your  network  and  stop  threats  long  before  they 
reach  you.) 

The  result  is  total  business  protection.  And  that's 
an  absolute  certainty. 

Take  our  instant  security  assessment  and  find  out 
how  The  Science  of  Certainty  will  benefit  your  business. 
Visit  www.becertain.info/go/cwb 


Be  certain 
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onsortium 
or  a  Cure 

The  power  of  grid  computing  propels  cancer 
research  to  a  new  level  By  Mary  K.  Pratt 


'V 


COMPUTERWORLD  HONORS  SHOWCASE 

National  Cancer  Institute’s 
Cancer  Biomedical  Informatics  Grid 


ORGANIZATION:  The  National  Cancer  Institute  (NCI),  part  of  the 
National  institutes  of  Health,  is  the  U.S.  government’s  principal  agency  for  cancer 
research  and  training. 

PROJECT  CHAMPIONS:  Dr.  John  Niederhuber,  former  chairman  of  the  National  Cancer 
Advisory  Board  and  now  director  of  the  NCI;  former  director  Dr.  Andrew  von  Eschenbach; 
and  deputy  director  Anna  Barker 

STAFF:  About  180  NCI  IT  staffers,  along  with  about  620  people  from  various  institutions 
outside  the  NCI,  work  on  caBIG. 

ROI:  The  NCI  has  invested  $20  million  annually  over  the  past  three  years.  Participants  share 
tools  and  data,  which  reduces  duplicative  efforts  and  speeds  up  research  breakthroughs. 


Scientists  and  doctors 

fighting  cancer  have  a 
powerful  new  weapon.  It’s 
not  an  innovative  drug  or 
breakthrough  gene  therapy. 
Rather,  it’s  an  expansive 
technology  initiative  that  links  them  to¬ 
gether  in  their  efforts  to  find  a  cure.  The 
Cancer  Biomedical  Informatics  Grid, 
or  caBIG,  is  a  voluntary,  open-source, 
open-access  network  that  allows  insti¬ 
tutions,  teams  and  individual  research¬ 
ers  in  the  U.S.  to  share  tools,  standards, 
data,  applications  and  technologies. 

The  National  Cancer  Institute  devel¬ 
oped  caBIG  with  one  goal  in  mind:  to 
speed  progress  on  cancer  research  and 
care.  “I  really  see  it  as  the  next  genera¬ 
tion  of  research,”  says  David  Fensterm- 
acher,  director  of  biomedical  informat¬ 
ics  at  the  Abramson  Cancer  Center  of 
the  University  of  Pennsylvania. 

Computerworld  named  the  NCI  a  2006 
Honors  Program  recipient  in  the  science 
category  for  its  development  of  caBIG. 

“The  community  was  really  very 
ready  for  it,”  says  Joel  Saltz,  professor 
and  chairman  of  biomedical  informat¬ 
ics  at  the  Arthur  G.  James  Cancer  Hos¬ 
pital  and  Richard  J.  Solove  Research 
Institute,  part  of  Ohio  State  University. 

The  research  community  has  been 
developing  grid  technologies  and  super¬ 


computer  consortia  to  support  its  work, 
Saltz  says.  And  as  grid  technology  has 
matured,  so  has  researchers’  willing¬ 
ness  to  share  data  and  tools,  particularly 
through  the  Human  Genome  Project. 

The  Need 

Despite  the  evolution  in  those  areas, 
researchers  were  still  fairly  isolated 
within  their  institutions  when  the  NCI 
announced  the  caBIG  initiative  in  2003, 
project  leaders  say. 

“We  were  generating  this  large 
knowledge  base,  and  the  only  way  we 
were  getting  that  knowledge  out  was 
writing  papers,”  says  Rakesh  Nagarajan, 
an  assistant  professor  in  the  depart¬ 
ment  of  pathology  and  immunology  at 
Washington  University  in  St.  Louis. 

And  even  though  researchers  and 
institutions  at  the  time  were  sharing 
some  data  sets,  the  process  was  cum¬ 
bersome.  Researchers  would  e-mail 
files  or  burn  data  onto  CDs  or  DVDs, 
which  would  then  be  mailed.  Moreover, 
the  data’s  format  varied  from  institu¬ 
tion  to  institution,  which  required 
recipients  to  convert  information  into 
formats  compatible  with  their  own 
systems. 

“The  idea  [with  caBIG]  was  that 
you  should  be  able  to  re-analyze  data 
in  new  and  novel  ways  and  integrate 


other  data,”  Nagarajan  says. 

This  was  the  backdrop  as  the  NCI 
launched  caBIG  in  February  2004,  work¬ 
ing  with  some  50  NCI-designated  cancer 
centers  and  more  than  30  other  organi¬ 
zations  to  build  this  infrastructure. 

The  Challenge 

While  the  initiative  enjoyed  an  enthusi¬ 
astic  response  from  the  research  com¬ 
munity,  the  program  —  like  all  technol¬ 
ogy  projects  —  had  to  contend  with  both 
systems  and  cultural  challenges. 

First,  caBIG  had  to  link  institutions 
spread  across  24  states  and  individuals 
working  on  various  systems,  including 
legacy  systems,  in  different  locales  that 
were  generating  data  in  different  formats 
using  varying  semantics  for  the  same 
abstract  concepts. 

“What  we  saw  there  was  tremendous 
[diversity]  in  need  and  systems.  And 
we  were  covering  the  entire  landscape, 
from  discovery  research  to  clinical 
trials  to  the  intermediary  steps,”  says 
Ken  Buetow,  the  NCI’s  associate  direc¬ 
tor  for  bioinformatics  and  IT,  and  direc¬ 
tor  of  the  NCI  Center  for  Bioinformatics, 
which  directs  caBIG. 

Program  leaders  cooperatively  de¬ 
veloped  the  architecture,  software 
infrastructure  and  standards  for  shar¬ 
ing  data.  They  created  interoperability 
that  allows  for  machine-to-machine 
exchanges,  the  compatibility  of  tools 
and  the  accurate  exchange  of  complex 
concepts  through  the  use  of  standard¬ 
ized  definitions  and  semantics. 

The  Technology 

CaBIG  leverages  existing  software 
standards  and  open  platforms,  such 
as  the  Globus  Toolkit,  wherever  pos¬ 
sible  in  the  development  of  this  suite  of 
interoperable  biomedical  informatics 
tools  and  shared  vocabularies  and  data 
elements. 

The  program  also  uses  specific  tools 
such  as  caDSR  (Cancer  Data  Standards 
Repository),  EVS  (Enterprise  Vocabulary 
System)  and  caGrid  to  allow  geographi¬ 
cally  dispersed  researchers  and  informa- 
ticians  to  query  data  using  desktop  tools. 

Today,  more  than  800  people  contrib¬ 
ute  to  caBIG  by  developing  applications, 
infrastructure,  standards,  policy  docu¬ 
ments  and  related  resources.  CaBIG 
also  links  cancer  centers  in  32  states. 
Moreover,  NCI  has  developed  a  close 
collaboration  with  the  U.K.’s  National 
Cancer  Research  Institute,  which  plans 
to  hire  someone  to  work  exclusively 
with  caBIG  to  ensure  coordination  and 
technical  compatibility. 

The  NCI  has  spent  $20  million  annu¬ 
ally  for  the  past  three  years  to  develop 
caBIG,  with  much  of  this  federal  mon¬ 


ey  going  into  labor  costs  and  software- 
related  services,  according  to  Buetow 
and  Peter  A.  Covitz,  chief  operating 
officer  at  the  NCI  Center  for  Bioinfor¬ 
matics.  Participating  institutions  also 
contribute,  usually  through  in-kind 
resources  or  sweat  equity. 

Moving  forward,  Buetow  and  Covitz 
say  the  goal  is  to  expand  not  only  the 
tools  and  data  available  on  caBIG,  but 
also  the  number  of  people  using  it. 
Program  leaders  say  they  also  want  to 
improve  the  ease  of  using  and  making 
submissions  to  caBIG  and  deliver  more 
user  interfaces  in  the  upcoming  year. 

“The  belief  is  that  caBIG  will  tie  to¬ 
gether  resources  and,  if  nothing  else, 
will  accelerate  breakthroughs  in  cancer 
research,”  Covitz  says. » 


Pratt  is  a  Computerworld  contributing 
writer  in  Waltham,  Mass.  Contact  her  at 
marykpratt@verizon.net. 
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No  one  decision  determines  suc¬ 
cess  or  failure  of  a  project.  Yet  project 
leaders  point  to  a  single  step  that  proved 
crucial  to  the  success  of  the  Cancer  Bio¬ 
medical  Informatics  Grid,,  or  caBIG. 

That  step?  Meeting  with  stakeholders  in 
the  research  community  before  developing 
the  technology  itself. 

“When  you  look  back  at  the  program, 
one  of  the  reasons  it's  been  as  successful 
as  it  has  was  those  early  discussions  with 
the  stakeholders,”  says  Mark  Adams,  a 
senior  associate  at  Booz  Allen  Hamilton 
Inc.  (BAH). 

As  the  project's  general1  contractor,  BAH 
directly  manages  all  caBIG  contracts  and 
ensures  coordination  and  accountability  of 
those  contracts.  Adams  is  BAH  s  caBIG  pro¬ 
gram  manager,  making  him  the  senior  per¬ 
son  overseeing  the  firm’s  caBIG  activities. 

The  National  Cancer  Institute  launched 
caBIG  in  February  2004,  As  the  project 
got  under  way,  program  staffers,  working 
In  five  teams,  visited  49  centers  in  42  days 
to  develop  a  detailed  accounting  of  issues, 
needs  and  capabilities  within  the  biomedi¬ 
cal  Informatics  community. 

“We  took  an  IT  person  and  subject  mat¬ 
ter  expert  to  every  place  and  asked  about 
needs,  what  are  you  good  at,  where  do 
you  need  help  and  what  are  your  interests,’’ 
Adams  explains.  “We  didn’t  go  and  Impose 
a  framework  on  people.  We  went  out  and 
asked  and  then  built  an  organization  based 
on  where  we  perceived1  a  need.” 

-  MARY  K.  PRATT 


.INFRASTRUCTURE  LOG 

V 

_DAY  59:  The  infrastructure  is  growing  out  of  control. 
Nothing’s  being  used  to  capacity.  It  costs  a  ton  to 
manage,  both  in  time  and  resources.  All  we  do  is 
react  to  problems.  I  told  Gil  I’m  tired  of  spending 
my  days  putting  out  fires.  He  said  he’d  pitch  in. 

_Gil  brought  in  a  fire  hose.  Everyone  is  sopping 
wet,  and  the  data  center  is  an  electrified  wading 
pool.  We’ve  got  to  find  something  better  than  H20. 


/ 

I 

f  / 

/ 

: 

j 

I 

/  / 

jt 


Jl  COMPUTERWORLD  November  13, 2006 


BRIEFS 


SunGard  Releases 
WealthStation  2.0 

■  SunGard  Data  Systems  Inc. 
has  unveiled  WealthStation  2.0, 
which  adds  unified  managed 
account  features  to  the  wealth 
management  software  for 
financial  services  firms  and 
financial  advisers.  The  software 
can  consolidate  assets  from 
multiple  accounts  and  institu¬ 
tions  into  one  central  planning 
and  decision-making  environ¬ 
ment,  according  to  SunGard.  The 
Wayne,  Pa.-based  vendor  says 
that  WealthStation  2.0,  with  its 
financial  planning,  asset  alloca¬ 
tion  and  CRM  modules  enabled, 
is  priced  at  about  $1,000  per 
user  per  year;  volume  discounts 
are  available. 


Inter-Tel  Unveils 
SIP-based  Switch 

■  Inter-Tel  Inc.  last  week  an¬ 
nounced  the  Inter-Tel  7000 
communications  switch,  which 
is  based  on  Session  Initiation 
Protocol  standards.  The  product 
is  designed  to  help  integrate  SIP- 
based  applications  and  devices 
into  a  business  network  and  can 
support  up  to  2,500  users,  the 
Tempe,  Ariz.-based  vendor  says. 
Pricing  starts  at  $600  per  user. 
The  switch  is  available  now. 


Spectra  Logic 
Upgrades  Appliance 

■  Data  storage  vendor  Spectra 
Logic  Corp.  last  week  announced 
the  Spectra  D500  network  stor¬ 
age  appliance.  The  new  product 
will  incorporate  Spectra  Logic’s 
BlueScale  storage  management 
software  to  make  it  easier  to 
manage  the  backup  and  ar¬ 
chiving  disk  system.  The  D500 
includes  the  same  BlueScale  in¬ 
terface  that  thousands  of  Spec¬ 
tra  Logic  T-Series  customers 
have  used  for  years,  making  it 
compatible  with  all  major  backup 
software  applications,  the  ven¬ 
dor  says.  The  D500,  which  can 
be  configured  with  2TB,  4TB 
or  8TB  of  raw  storage  capac¬ 
ity,  starts  at  $11,995  for  2TB 
of  storage  and  will  be  available 
in  December,  according  to  the 
Boulder,  Colo.-based  vendor. 
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How  to  Avoid  Getting 
Ransom  Notes 


BRUCE  HOARD 


I  SUPPOSE  it  shouldn’t  come  as  any  surprise  that 
cybercriminals  are  demanding  ransom  —  in 
some  cases  up  to  several  million  dollars  —  and 
threatening  to  launch  massive,  external  targeted 
attacks  if  we  don’t  pay  up.  No,  it  isn’t  surprising, 
but  it’s  depressing.  What  started  out  as  hacking  has 
turned  into  something  that  threatens  the  very  survival 
of  innocent  businesses. 


It’s  a  lose-lose  scenario 
for  the  victims.  Their  first 
choice  is  refusing  to  pay  the 
ransom  and  risking  crip¬ 
pling  attacks  launched  by 
multiple  virus-infected  com¬ 
puters  located  around  the 
world.  This  choice  entails 
contacting  law  enforcement 
authorities  and  hoping  that 
the  authorities  can  find  and 
arrest  the  threatening  party. 

Fat  chance.  And  this  op¬ 
tion  could  also  lead  to  a  fire¬ 
storm  of  negative  publicity 
that  can  be  just  as  fatal  as  the  global 
virus  attack. 

The  second  choice  isn’t  much  more 
alluring.  It  involves  paying  off  the 
extorters  and  hoping  they’ll  go  away 
and  not  come  back.  But  what  are  the 
chances  of  them  not  coming  back 
when  they  have  already  succeeded 
once?  At  this  point,  the  victim  orga¬ 
nization  is  in  even  worse  shape  than 
it  was  before  paying  the  first  round  of 
ransom,  because  it  has  compromised 
its  position  by  acceding  to  the  illegal 
demands. 

Admittedly,  this  worst-case  scenario 
is  experienced  by  relatively  few  com¬ 
panies  (just  how  few  we’ll  never  know, 
since  many  of  them  understandably 
keep  a  tight  lid  on  such  occurrences), 
but  it  points  to  a  larger  problem  faced 
by  businesses  everywhere.  Even  in 
the  troubled  and  terrorist-plagued 
world  that  we  live  in,  security  remains 
a  second-rate  concern  in  many  tight- 


fisted  organizations. 

It’s  not  cheap  to  set  up 
a  security  infrastructure. 
According  to  a  couple  of  ex¬ 
perts  I’ve  spoken  with,  the 
estimated  costs  for  protect¬ 
ing  a  company  with  15,000 
employees  run  anywhere 
from  $100,000  to  $1,000,000 
—  not  cheap,  indeed.  But,  as 
the  same  experts  are  quick 
to  ask,  how  much  does  it 
cost  to  recover  from  a  large- 
scale  disaster,  whether  it  be 
criminal  extortion  or  a  Cat¬ 
egory  5  hurricane? 

Not  that  it’s  necessary  to  go  full-bore 
in  order  to  implement  significant  secu¬ 
rity  measures.  However,  very  few  com¬ 
panies  go  beyond  the  level  of  develop¬ 
ing  simple  access  lists,  and  very  few 
are  currently  encrypting  their  internal 
disk  systems,  even  though  it’s  internal 
abuses  and  attacks,  not  external  ones, 
that  cause  the  most  damage. 

So,  how  to  get  started?  The  first 
thing  to  do  is  figure  out  whether  you 
want  to  run  your  security  show  in- 
house  or  farm  it  out  to  a  managed  ser¬ 
vices  provider. 

Typically,  the  largest  corporations 
with  the  most  internal  IT  talent  are  the 
most  likely  to  retain  this  key  function 
along  with  control  of  their  business- 
critical  data,  while  midsize  firms  are 
increasingly  seeing  the  value  of  out¬ 
sourcing.  It  takes  a  big  leap  of  faith  to 
entrust  your  most  important  data 
to  a  third-party  firm,  but  more  and 


more  businesses  are  doing  it. 

The  next  step  is  developing  a  se¬ 
curity  plan  based  on  a  comprehen¬ 
sive  review  and  classification  of  data. 
Where  is  it?  Which  data  is  confidential? 
What  policies  are  in  place  to  protect 
it?  And  how  easy  is  it  to  monitor  and 
enforce  them?  The  best  way  to  protect 
your  most  sensitive  data  may  be  to  wall 
it  off  in  data  repositories  or  on  servers 
that  are  inaccessible  to  all  but  the  most 
trusted  authorized  personnel. 

Which  brings  up  the  sticky  issue 
of  access.  In  some  organizations,  IT 
infrastructures  have  grown  so  out  of 
control  for  so  long  that  nobody  really 
knows  who  has  access  and  at  what 
levels,  which  opens  up  the  disturb¬ 
ing  possibility  of  sysadmins  reading 
executive-level  e-mails.  Even  in  tight- 
security  IT  shops,  the  fact  is  that  sys¬ 
admins  require  high-level  access  to  do 
their  jobs. 

Once  a  security  plan  is  hammered 
out  and  access  control  becomes  more 
clear-cut,  it  comes  down  to  a  matter  of 
trust.  You  put  your  best  people  in  place 
and  trust  them  to  manage  your  sys¬ 
tems  —  it’s  as  simple  as  that. 

So,  how  will  this  kind  of  security 
plan  protect  potential  cyberextortion 
victims?  For  starters,  it  enables  these 
firms  to  make  it  known  to  the  world 
that  they’ve  spared  no  effort  in  devel¬ 
oping  the  strongest  possible  security 
infrastructure. 

Hackers  are  like  a  lot  of  people:  They 
take  the  path  of  least  resistance.  So  if 
they  know  some  company  has  turned 
itself  into  an  airtight  security  fortress, 
they’re  less  likely  to  engage  it  through 
hostile  acts. 

Aside  from  that,  cutting-edge 
security  technology  is  tough  to  cir¬ 
cumvent.  It  only  makes  sense  that  the 
more  judiciously  you  deploy  it,  the 
safer  you’ll  be. » 

WANT  OUR  OPINION? 

OFor  more  columns  and  links  to  our  archives  go  to: 

www.computerworld.com/columns 
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is  a  freelance  writer 
based  in  Bangor,  Maine. 
He  can  be  reached  at 

bbhoard@comcast.net. 


Take  back  control  with  an  IBM  I.  T.  Optimization  Solution. 

Control  your  resources  with  IBM  Systems  and  Middleware, 
which  let  you  virtualize  and  simplify  your  I.  T.  and  manage  your 
applications  and  systems  from  a  single  point  of  control. 

Control  your  costs  and  improve  utilization  of  your  existing  I.  T. 
resources  by  consolidating  and  simplifying  your  servers,  storage, 
apps  and  network  assets. 

Control  your  efficiency  by  automating  manual  tasks  to  reduce 
errors,  manage  availability  and  dynamically  allocate  I.  T.  resources 
as  needed. 

Control  your  I.  T.  destiny  with  IBM  Systems,  Middleware  and 
Services  -  a  proven  set  of  solutions  designed  to  take  your  company 
from  reactive  to  proactive. 


IBM.COM/TAKEBACKCONTROL/OPTIMIZE 
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C7  Capella  University 


Move  forward  with  an  IT  degree  online  from  Capella  University.  Capella  is  an'^ccredited  university  offering  hands-on,  real-world  experience. 
And  you  can  apply  to  earn  credit  for  real-world  experience,  training,  certifications  (such  as  CCNP®,  MCSE,  CISSP®,  and  PMP®),  and  previous 

1  '  .*  \J-,  'V' 

education.  To  learn  more,,  call  1-888-CAPELLA  or  visit  www.capella.edu. 


5  Higher  Learning  Coinmission  and  a  member7  of  the  North  Central  Association  of  Colieges  and  Schools,  30  N.  LaSalle  Street.  Suite  2400,  Chicago,  !l  60602  2504,  (312)  263-0456? 
Capella  University,  225  South  6th  Street,  9th  Fioor,  Minneapolis,  MN  55402,  '£>  2006  Capella  University 


HOT  SKILLS  GOT  THE  BIGGEST  PAY  BOUNCES 
IN  2006,  AS  COMPANIES  PREPARED  TO  FIGHT 

FOR  KEY  TALENT.  By  Stacy  Collett 
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Mike  york  has  15 

good  reasons  to  be 
happy  with  his  job. 
As  a  network  archi¬ 
tect  at  Experian  In¬ 
formation  Solutions 
Inc.’s  data  center  in  Allen,  Texas,  York 
saw  his  salary  jump  5%  this  year,  plus 
another  10%  as  the  credit  reporting 
company  raised  his  pay  to  equal  that 
of  his  counterparts  at  the  California 
headquarters.  “In  Texas,  I’m  the  only 
network  architect”  for  the  company, 
York  says  of  his  specialized  skills. 

He’s  not  the  only  one  with  reason 
to  smile.  While  IT  workers  across  the 
board  saw  their  pay  increase  an  aver¬ 
age  of  3.1%  again  this  year,  a  few  lucky 
ones  with  the  hottest  skills  saw  above- 
average  raises,  according  to  Comput- 
erworld’ s  20th  Annual  Salary  Survey, 
which  studied  the  compensation  and 
bonuses  of 14,740  IT  workers.  Network 
architects  like  York  received  average 
pay  increases  of  5.3%.  Web  developers, 
Internet  managers  and  directors  of 
e-commerce  saw  jumps  of  4%  or  more. 

Compensation  watchdogs  say  these 
IT  rock  stars  have  catapulted  to  popu¬ 
larity  because  of  consumer  demand. 
“The  dominant  business  model  is  now 
Web-based.  That’s  what  it’s  all  about,” 
says  David  Foote,  CEO  and  chief  re¬ 
search  officer  at  Foote  Partners  LLC  in 
New  Canaan,  Conn.  “Customers  are 
dictating  the  way  they  want  to  interact 
across  the  network  with  the  vendors. 
They’re  willing  to  define  the  relation¬ 
ship  in  part  by  how  secure  it  is  and 
how  easy  it  is  to  do  business  with  them. 
If  I’m  purchasing  from  a  Web  site  and 
the  site  is  too  slow,  I’m  off  of  it.” 

On  the  e-business  side,  the  need  to 
comply  with  the  Sarbanes-Oxley  Act 
and  other  regulations  drove  demand 
for  Web  skills  to  the  max  before  the 
compliance  deadlines  last  spring.  Now 
these  same  companies  have  returned 

Continued  on  page  44 


-  /  Is  your  salary  on  par  with 
what  your  peers  are  making? 
Use  our  Smart  Salary  Tool  to 
compare  your  pay  with  that  of  IT 
workers  in  similar  jobs  around 
the  country.  Our  2006  survey 
reports  on  the  salaries  of  nearly 
15,000  IT  professionals:  www. 
cotnputeffWorid.com/06/salaries 


SALARIES 


2006  AVERAGE  CHANGE  IN 
SALARY,  ACROSS  THE  BOARD 


SALARY  INCREASES 

BY  JOB  LEVEL 

BONUS  INCREASES 

BY  JOB  LEVEL 

SENIOR  MANAGERS 

BASE:  2.365 

3.5% 

SENIOR  MANAGERS 

BASE:  2,365 

6.1% 

MIDDLE  MANAGERS 

BASE:  4,319 

3% 

MIDDLE  MANAGERS 

BASE:  4,319 

2.1% 

IT  STAFFERS 

BASE:  8,056 

3% 

IT  STAFFERS 

BASE:  8.056 

0.5% 

HOW  HAS  YOUR  2006 
BASE  SALARY  CHANGED 
FROM  ONE  YEAR  AGO? 


No  change 


Increased 


Decreased 


AVERAGE  INCREASE 

AVERAGE  DECREASE 


6% 

7% 


BONUSES 


2006  AVERAGE  CHANGE  IN 
BONUS,  ACROSS  THE  BOARD 


HOW  HAS  YOUR  EXPECTED 
2006  BONUS  CHANGED 
FROM  ONE  YEAR  AGO? 


Increased 


No  change 


Decreased 


AVERAGE  INCREASE 
AVERAGE  DECREASE 


32% 

38% 


SATISFACTION 

HOW  SATISFIED  ARE  YOU 
TODAY  WITH  YOUR  TOTAL 
COMPENSATION  PACKAGE? 

Satisfied  ^^^^^^Very  satisfied 


Very 

dissatisfied: 

®  '/q  Dissatisfied 


4qojl  "«r  Neither 
satisfied 
nor  dissatisfied 


HOW  DOES  YOUR  LEVEL  OF 
SATISFACTION  COMPARE 
TO  ONE  YEAR  AGO? 


Less 
satisfied 


The  same 


-m 

More 
satisfied 


Very 
dissatisfied:' 

3% 


Dissatisfied 


OVERALL,  HOW  SATISFIED 
ARE  YOU  WITH  YOUR 

CURRENT  JOB?  Neither 
satisfied  nor 
Satisfied  .^^^^^^^^tdissatisfied 


BIGGEST  WINNERS 

TITLES  THAT  SAW 
HIGHER-THAN-AVERAGE  GAINS 
IN  TOTAL  COMPENSATION 


Director/vice  president  of 
e-commerce/e-business 

5.5% 

Network  architect 

5.3% 

Web  developer 

4.8% 

CIO 

4.5% 

Storage  architect/ 

4.5% 

engineer/administrator 

BIGGEST  LOSERS 

TITLES  THAT  SAW 
LOWER-THAN-AVERAGE  GAINS 
IN  TOTAL  COMPENSATION 


E-commerce  specialist 

1.1% 

E-commerce  manager 

1.2% 

Technician 

1.3% 

Network  manager 

1.4% 

Technical  trainer 

1.9% 

HOW  DOES  YOUR  LEVEL  OF 
SATISFACTION  COMPARE 
TO  ONE  YEAR  AGO? 


Less 
satisfied 


More 
satisfied 


Notin 
^the  same 
position  as 
one  year  ago:  4% 


wmM 


SJS 


' 

-  .  >  \  -i  ~  •  ,. . 


One  planet.  One  networkrinfinite  possibilities 


THERE  IS  AN  ALTERNATIVE 


Your  global  IP  carrier  should  set  you  free,  not  hold 
you  down.  It  should  be  nimble  and  flexible  enough 
to  deliver  innovative  IP  solutions  and  superior 
support  yet  expansive  enough  to  offer  the  global 
scope  and  scale  your  business  requires.  Enter 
Global  Crossing.  Our  wholly-owned  global  IP 
network  connects  you  virtually  .anywhere  instantly. 
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NETWORK  ARCHI¬ 
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COMPANY]. 


MIKE  YORK,  EXPLAINING  THE  15% 
RAISE  THAT  BROUGHT  HIM  UP  TO  PAR 
WITH  NETWORK  ARCHITECTS  AT  EX- 
PERIAN'S  CALIFORNIA  HEADQUARTERS 
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the  Numbers 


THE  HEART  OF  THE  MATTER 


WHERE  DO  YOU  EXPECT 
TO  BE  IN  YOUR  CAREER 
FIVE  YEARS  FROM  NOW? 


Promoted  to  a  higher 
level  position 


At  the  same  job  in 
the  same  company 


Self- 
employed:  5% 


Retired: 

7% 


In  a  job  outside  the 
IT  profession:  6% 


At  a  similar  job  in 
a  different  company 


THE  TOP  SEVEN  CHALLENGES 
FACING  WORKERS  IN 
THE  IT  INDUSTRY  TODAY 


WHAT  MATTERS  MOST  TO 
YOU  ABOUT  YOUR  JOB? 


Base  pay 
Benefits 

Vacation  time/paid  time  off 

Challenge  of  job/responsibility 

Flexible  work  schedule/ 
telecommuting/work  at  home 

Potential  for  career  advancement 
and  development 

Job  stability 


71% 

53% 

43% 

35% 


34% 


28% 

28% 


Skills  development/educational, 
training  opportunities 


25% 

20% 


Job  atmosphere/community 
My  opinion  and  knowledge  is  valued  18% 
Bonus  opportunities  18% 

Financial  stability  of  company  14% 

Recognition  for  work  well  done  13% 

Corporate  culture  and  values  12% 

Having  the  resources  to  do  my  job  well  11% 


1  Alignment  of  IT  with 
the  business 

23% 

Effectiveness  of  immediate  supervision 

8% 

2  Keeping  up  with 

technology  advancements 

20% 

Working  with  highly  talented  peers 

Work  with  leading-edge  technology 

Corporate  commitment  to  and 
understanding  of  the  importance  of  IT 

8% 

8% 

3  Outsourcing 

18% 

4  Job  security 

10% 

7% 

5  Gap  between  skills  required 
and  training  available 

9% 

Stock  options 

5% 

How  my  work  helps  achieve 
company  goals 

6  IT  talent  shortage 

9% 

5% 

7  The  economy 

9% 

Company  reputation 

4% 

BASE:  14,647 

NOTE:  MULTIPLE  RESPONSES  ALLOWED, 

NOTE:  MULTIPLE  RESPONSES  ALLOWED. 

JOB  SECURITY 


HOW  SECURE  DO  YOU  FEEL 
IN  YOUR  CURRENT  POSITION? 


Secure 


Somewhat 
secure 


Not  very 
secure 


Not  at  all  secure:  3% 


HOW  SECURE  DO  YOU 
FEEL  COMPARED  WITH 
ONE  YEAR  AGO? 


More 

secure 


The  same 


Less 

secure 


Not  in  same  position  as  one  year  ago:  4% 


Continued  from  page  42 
to  enhancing  Web-based  products  and 
services,  Foote  says. 

Dennis  Byford,  a  network  architect 
at  Integris  Health  Inc.  in  Oklahoma 
City,  has  seen  his  personal  stock  rise  as 
more  IT  projects  involve  the  Web.  “All 
of  our  projects  right  now  are  tied  into 
electronic  medical  records  and  physi¬ 
cian  order  entry  systems,”  he  says. 

Squaring  Up 

At  raise  time,  Jennifer,  a  wireless  net¬ 
work  engineer  at  a  hospital  system 
in  Florida,  knew  what  her  skills  were 
worth.  Unfortunately,  her  employer 
didn’t.  So  she  balked  when  the  hospital 
offered  her  a  3%  pay  increase  this  year. 

“[Some  executives]  don’t  understand 
what  an  impact  wireless  has  in  the 


enterprise,”  says  Jennifer,  who  asked 
that  her  full  name  not  be  used.  She  has 
three  years’  experience  managing  a 
100-access-point  wireless  infrastruc¬ 
ture  and  has  earned  Cisco  Systems 
Inc.’s  CCNP  and  CCIE  certifications. 

“I’m  in  charge  of  their  entire  wire¬ 
less  network,  and  it’s  growing  faster 
than  [the  current  infrastructure]  can 
possibly  accommodate,”  she  says.  “I’m 
trying  to  get  them  to  understand  the 
value  of  what  I  do.  I  really  don’t  think 
that  they  get  it.” 

Executives  eventually  saw  the  light 
and  gave  Jennifer  a  7.75%  raise.  “But 
I’m  still  a  little  underpaid,”  she  adds. 

In  fact,  Jennifer  is  one  of  the  lucky  ones 
—  other  wireless  network  engineers 
and  network  engineers  in  this  year’s 
survey  received  pay  raises  that  were  a 


bit  lower  than  average,  at  just  2.7%. 

Overall,  Computer-world's  Salary 
Survey  and  other  studies  point  to  a 
firming  labor  market.  Some  41%  of  IT 
executives  who  responded  to  Comput- 
erworld’s  second-quarter  Vital  Signs 
Survey  said  they  found  it  more  difficult 
to  recruit  key  IT  talent  than  they  did 
at  the  same  time  last  year.  Sixteen  per¬ 
cent  of  the  respondents  to  this  year’s 
Salary  Survey  said  they  expect  to  be  in 
a  similar  job  but  at  a  different  company 
within  the  next  five  years,  and  nearly 
half  (47%)  reported  that  they’re  active¬ 
ly  or  passively  looking  for  another  job. 

Similarly,  according  to  an  August 
2006  online  survey  of  1,000  IT  workers 
by  the  Computing  Technology  Indus¬ 
try  Association,  60%  of  IT  profession¬ 
als  are  hunting  for  a  new  job.  Of  those 


job  hunters,  27%  said  they’re  actively 
searching,  52%  said  they’re  “somewhat 
actively”  looking,  and  20%  said  they’re 
“not  very  actively”  hunting  for  new 
work.  Three  quarters  of  respondents 
said  they  wanted  better  pay. 

Here’s  another  sign  that  employers 
are  reacting  to  a  tightening  labor  pool 
for  certain  specialties:  Research  by 
Robert  Half  Technology  shows  that 
average  starting  salaries  are  expected 
to  climb  3%  this  year,  with  greater 
increases  for  positions  like  IT  audi¬ 
tor  (11.2%),  lead  application  developer 
(5.3%)  and  network  security  adminis¬ 
trator  (5.2%).  Indeed,  dark  clouds  are 
looming  over  employers  of  people  with 
these  specialized  skills. 

“We  have  headhunters  calling  all  the 
Continued  on  page  46 


»  If  keeping  up  with  IP  security  requirements  and  compliance  is  important  to  your  branch  operations,  good  news: 
Juniper  makes  any  branch  network  better.  Our  Secure  Services  Gateway  features  the  multi-layered  network-  and 
application-level  protection  your  enterprise  demands,  plus  enough  horsepower  to  ensure  your  security  solution  is 
never  a  LAN  or  WAN  bottleneck. 

Industry  insiders  say  remote  offices  are  your  weakest  link.  But  Juniper’s  SSG  family  delivers  the  muscle  to  protect 
your  high-speed  LAN  as  well  as  your  WAN  —  at  all  branch  sites.  Find  free  white  papers,  demos  and  more: 

www.juniper.net/branch 
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1.888. JUNIPER 


46 


CGMPUTERWORLD  November  13, 


MANAGEMENT 


www.computerworld.com 


Continued  from  page  44 
time”  for  IT  workers  with  network  and 
Web  skills,  Byford  says.  Fortunately  for 
Integris,  he  is  happy  to  stay  put  for  now. 
But  other  companies  aren’t  as  lucky. 

On  the  Market 

Job  hopping,  a  career  strategy  that 
tumbled  with  the  dot-com  bust,  is 
showing  signs  of  a  comeback.  Matthew 
Castillo,  a  Web  developer  and  adminis- 
trator  at  the  University  of  Houston,  has 
already  seen  private-sector  companies 
poach  employees  with  Web  skills  from 
his  staff.  The  12-person  Web  technolo¬ 
gies  group  has  lost  two  people  “just  be¬ 
cause  they  can  make  more  elsewhere,” 
Castillo  says.  “Especially  in  a  state 
institution  where  salaries  are  fixed,  it’s 
hard  for  us  to  compete.” 

Foote  calls  it  a  battle  for  specialized 
skills.  “There  have  always  been  talent 
wars  in  specific  jobs.  That  has  never 
changed.  The  difference  today  is  it’s 
now  down  to  this  niche  level,”  Foote 
says.  For  these  in-demand  skills,  com¬ 
panies  are  willing  to  pay  “skills  premi¬ 
ums”  in  the  form  of  signing  bonuses  or 
retention  bonuses. 

C++  programmers  are  earning  7%  to 
11%  over  base  pay,  according  to  Foote 
Partners  research.  Certified  Web¬ 
Sphere  skills  can  nab  12%  to  14%  in  bo¬ 
nus  pay.  CWNP  wireless  certifications 
from  Planet3  Wireless  Inc.  can  earn 
employees  8%  to  12%  more.  Cisco  cer¬ 
tification  as  an  advanced  wireless  LAN 
design  specialist  translates  to  a  7%  to 
11%  increase  in  salary.  Foote’s  study 
also  found  that  skills  premiums  were 
similar  for  both  certified  and  noncerti- 
fied  employees  in  these  areas. 


ft  SALARY  RAISES  HAVE  RIDDEN  THE  HIGHS  ANDLOWS  OF  ECONOMIC  CHANGES.  HERE  ARE  THE  IT  PAY 
RAISES,  AS  REPORTED  IN  COMPUTERWQRUJ’S  ANNUAL  SALARY  SURVEY  FROM  1987  TO  2006.  . 


6.7%* 


’4fFHEs£ YEARS,  C0MPUTERW0RLD  SURVEYED  IT  WORKERS  ABOUT  CHANGES  IN  THEIR  TOTAL  COMPENSATION.  ALL  OTHER  YEARS  SHOW  ONLY  SALARY  CHANGES. 


1987  1988  1989  1990  1991  1992  1993  1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006 


That  creates  problems  for  public- 
sector  IT  departments  that  can’t  pay 
extra  for  special  skills.  All  IT  workers 
at  the  California  Department  of  Tech¬ 
nology  Services  got  a  3.5%  pay  raise 
this  year,  but  Internet  services  manag¬ 
er  David  Rial  has  a  hard  time  compet¬ 
ing  with  the  private  sector  for  candi¬ 
dates  who  have  any  kind  of  specialized 
skills.  “If  I  train  my  people,  then  I’m  at 
risk  of  losing  [them]  to  higher  salaries 
in  the  private  sector,”  he  says. 


But  all  this  extra  pay  could  wreak 
havoc  on  a  company’s  compensation 
practices,  Foote  warns.  “What  they’re 
doing  now  is  the  worst  of  all  worlds.  IT 
is  saying,  ‘I’m  going  to  give  this  person 
any  title  they  want  and  ignore  the  HR 
department’s  compensation  guidelines 
for  that  position.’  That’s  messy,”  he 
says,  because  it  creates  overinflated 
pay  scales  down  the  road. 

The  best  way  to  capture  candidates 
with  hot  skills  is  to  pay  extra  through 


a  signing  bonus  or  a  retention  bonus, 
Foote  recommends,  “and  give  them  an 
informal  job  title  that  will  differentiate 
[the  employee]  because  we  believe  this 
skill  is  more  valuable  than  others.”  » 


Collett  is  a  Computerworld  contributing 
writer.  Contact  her  at  stcollett@aol.com. 


CHARTS 


For  compensation 
information  for  30  IT  job 
titles,  turn  to  PAGE  32. 


TOTAL  COMPENSATION 
BY  RE6I0N 


New  England:  Maine,  Vermont,  New  Hampshire, 
Massachusetts,  Connecticut,  Rhode  Island 

Middle  Atlantic:  New  York,  New  Jersey, 

Pennsylvania 

South  Atlantic:  Delaware,  District  of  Columbia, 
Maryland,  Virginia,  West  Virginia,  North  Carolina, 
South  Carolina,  Georgia,  Florida,  Puerto  Rico, 

U.S.  Virgin  Islands 

North  Central:  Wisconsin,  Michigan,  Illinois, 
Indiana,  Ohio,  North  Dakota,  South  Dakota, 
Minnesota,  Nebraska,  Iowa,  Kansas,  Missouri 

South  Central:  Kentucky,  Tennessee,  Mississip¬ 
pi,  Alabama,  Oklahoma,  Arkansas,  Louisiana,  Texas 

Mountain:  Idaho,  Montana,  Wyoming,  Nevada, 
Utah,  Colorado,  Arizona,  New  Mexico 

Pacific:  Alaska,  Washington,  Oregon, 

California,  Hawaii,  Guam 


NEW 

ENGLAND 

MIDDLE 

ATLANTIC 

SOUTH 

ATLANTIC 

NORTH 

CENTRAL 

SOUTH 

CENTRAL 

MOUNTAIN 

PACIFIC 

§  C  v, -  ^  _ 

CiO/vice  president  of  IT 

$178,242 

$193,407 

$177,308 

$164,532 

$164,816 

$157,439 

$185,524 

Director  of  IT  operations 

$120,636 

nen 

$112,674 

$110,795 

$102,557 

|  $92,709  || 

$119,658 

IT  manager 

$88,897 

$92,670 

$87,515 

$83,672 

$82,543 

$80,482  i| 

$88,859 

Project  manager 

$96,556 

$102,141 

$101,514 

$93,156 

$96,332 

$96,648  | 

$101,091 

Technology/business  systems  analyst 
Programrner/analyst 
Help  desk/tech  support  specialist 
Systems  administrator 
Software  engineer 
Database  administrator 
Network  administrator 
Senior  systems  analyst 
Systems  architect 
Software  developer 
Systems  analyst 

Programming/application 
development  manager 


$66,425 

$73,162 

$54,444 

$65,312 

$93,724 

$84,860 

$83,005 

$84,864' 

$104,345 

$88,015 

$75,362 

$119,899* 


$70,748 


$48,975 


$69,514 


,071 


$57,966 


$82,917 

$105,241 


$77,005 

$68,994 

$49,697 

$66,720 

$90,395 

$86,576 

$56,701 

$83,704 

$97,804 

$83,849 

$68,641 

$103,737 


$71,216 


$65,011 


$44,239 


$65,096 


$80,127 

$79,204 


|  $51,884 

$82,008 
$95,325 
$74,104  § 
$67,583  | 


$74,819 

$68,259 

$45,847 

$62,097 

$82,942 

$82,375 

$55,733 

$87,973 

$106,024 

$83,758 

$69,614 


$65,378 


$68,823 


$45,345 

$70,444 

$88,526 

$81,271 


$49,605 


$89,297 

$98,015 


377,183 


$74,214 

$80,149 

$57,139 

$73,990 

$95,275 

$89,457 

$59,397 

$90,921 

$110,377 

$89,956 

$69,190 


BLUE  TEXT:  The  total  base  for  this  job  title  in  this  particular  region  was  fewer  than  30  responses  but  more  than  15. 
These  figures  should  be  used  for  comparison  only,  because  they  don’t  constitute  a  statistically  significant  sampling. 


$102,188  $109,237  $103,277  $116,334 

*  The  total  base  for  this  job  title  in  this  particular  region  was  fewer  than  16  responses 
but  more  than  nine.  This  figure  should  be  used  for  comparison  only. 
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GENDER  GAP: 


LAW  FIRM  IT  director  Patti  Henderson 
says  it’s  an  open  secret  among  a  group 
of  her  professional  peers  in  Boise,  Idaho: 
Men  working  in  the  same  IT  positions 
freely  admit  that  they  make  more  money 
at  the  same  jobs.  For  Henderson,  her  pre¬ 
decessor  at  law  firm  Givens  Pursley  LLP 
earned  12%  more  as  director  of  IT. 

“He  came  right  out  and  said  it.  The 
excuse  is  that  he  knew  the  firm  and  the 
way  things  ran  better  [than  I  did],  and 
I  would  have  to  build  up  to  [his  salary 
level],’’  she  recalls.  It  took  her  five 
years  in  the  IT  director’s  position  to 
make  as  much  as  he  had  made  a  half¬ 
decade  earlier. 

The  gender  gap  in  compensation 


remains  striking,  according  to  Computer- 
world's  20th  annual  Salary  Survey.  A  male 
director  of  IT  makes  $114,045  on  aver¬ 
age,  while  a  female  with  that  title  makes 
$109,446,  according  to  the  survey.  The 
gap  between  men  and  women  widens  to 
nearly  $10,000  with  the  title  of  CIO  or  vice 
president  of  IT. 

Across  the  board,  total  IT  compensation 
averaged  $91,464  for  men  and  $80,781  for 
women.  Those  figures  are  similar  to  those 
from  the  U.S.  Bureau  of  Labor  Statistics, 
which  reported  that  in  2005,  women’s 
usual  median  weekly  earnings  were  81%  of 
men’s.  And  although  that  pay  disparity  isn’t 
for  IT  workers  alone,  the  industry  does  have 
its  own  challenges. 


“The  numbers  are  symbolic  of  the  obsta¬ 
cles  and  roadblocks  that  IT  organizations 
have  put  up  [for  women]  that  are  sending 
women  away  in  droves,”  says  Gartner  Inc. 
analyst  Diane  Morello,  who  in  October 
presented  a  maverick  study  called  “Men 
and  Women  in  IT:  Breaking  through  Sexual 
Stereotypes.” 

Morello  says  IT  departments  should 
look  beyond  gender  to  the  unique  and  vital 
characteristics  that  women  bring  to  a  high- 
performance  team.  She  says  research  shows 
that  women  listen  better  than  men,  possess 
better  language  skills  and  score  better  on 
assessments  of  social  skills  and  ability  to 
understand  other  people’s  views,  which 
aids  in  team-building  and  negotiations. 

Still,  those  revelations  haven’t  helped 
boost  salaries  for  some  women  in  IT. 
Jennifer,  a  wireless  network  engineer  in 
Florida  who  asked  to  remain  anonymous,  is 
relieved  that  the  disparity  between  her  pay- 
check  and  those  of  her  male  counterparts  is 
only  $5,000.  At  her  last  job,  the  pay  differ¬ 
ence  was  nearly  $20,000. 

“Naturally,  I  thought  about  submitting  my 
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rdsume  with  only  a  first  initial.  But  when 
they  get  me  on  the  phone,  I  can’t  exactly 
hide  that  I’m  a  female,”  she  says. 

Jan,  a  manager  of  Internet  services  at  a 
nonprofit  organization  who  also  asked  that 
her  full  name  not  be  used,  knows  she’s  paid 
less  than  the  men  in  her  group.  “There’s 
probably  a  $15,000  difference”  in  pay, 
she  says.  “But  at  this  point,  I’d  be  crazy  to 
leave.  I’m  too  close  to  retirement.” 

Morello  offers  these  words  of  advice:  “If 
I  were  a  woman  trying  to  advance,  I  would 
look  at  companies  that  have  more  global 
business  and  put  myself  in  positions  for 
greater  teaming  and  global  projects.  Also, 

I  would  be  asking  if  I  have  the  right  kind  of 
mentors  -  those  who  are  tapped  into  busi¬ 
ness-based  advancements  and  the  people 
who  have  high  credibility,”  many  of  whom 
happen  to  be  men. 

If  these  stereotypes  aren’t  eliminated, 
Morello  cautions  that  40%  of  women  will 
leave  the  IT  workforce  by  2012.  And  if  that 
happens,  she  says,  suddenly  “your  IT  skills 
crisis  is  50%  worse  than  you  think.” 

-  STACY  COLLETT 


SALARIES  FOR  WOMEN  STILL  TRAIL 


MALE  IT  WORKERS 

FEMALE  IT  WORKERS 

$91,464 

AVERAGE  2006  TOTAL 
COMPENSATION 

$80,781 

AVERAGE  2006  TOTAL 
COMPENSATION 

UP  3.2%  FROM  LAST  YEAR 

I  UP  3.1%  FROM  LAST  YEAR 

BRIGHTER  NEWS  FOR  BONUSES 

Although  they  earned  less  bonus  money  overall,  female  IT  workers  reported 
a  slightly  higher  percentage  increase  in  bonuses  this  year. 

MALE  IT  WORKERS 

FEMALE  IT  WORKERS 

$8,437 

AVERAGE  2006  BONUS 

$5,936 

AVERAGE  2006  BONUS 

UP  3.2%  FROM  LAST  YEAR  | 

|  UP  3.5%  FROM  LAST  YEAR 

BASE:  12.181  MEN;  2.477  WOMEN 


SAME  JOB,  DIFFERENT  PAY 

A  sampling  of  common  titles  and  the  earning  power  of  men  vs.  women: 


CIO 

PROJECT  MANAGER 

MALE 

BASE:  350 

$179,293 

MALE 

BASE:  576 

$99,846 

FEMALE 

BASE;  49 

$162,626 

FEMALE 

BASE:  187 

$88,009 

IT  MANAGER 

HELP  DESK  MANAGER 

MALE 

BASE:  1.260 

$86,282 

MALE 

BASE:  164 

$77,931 

FEMALE 

BASE:  218 

$82,137 

FEMALE 

BASE:  32 

$71,682 

DIRECTOR  OF  IT 
male  $114,045 

BASE:  976 

PROGRAMMER/ANALYST 
MALE  $69,792 

BASE:  553 

FEMALE 

BASE:  140 

$109,446 

FEMALE 

BASE:  144 

$63,558 

HITACHI 


?  and  storage  system  requirements,  maximize  performance,  and  reduce  costs.  It  also  ensures  that  data  movement  is  transparent  and  nondisruptive  at  all  times.  It's  all 
part  of  our  new  Application  Optimized  Storage™  solutions  and  our  commitment  to  being  your  Partner  Beyond  Technology.  To  learn  more,  visit  www.hds.com/tiered 
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MONEY  TRUMPS  ALL 


WHICH  FACTORS  WOULD 
MOST  INFLUENCE  YOU  TO 
CHANGE  YOUR  JOB? 


1 

Salary  increase 

82% 

2 

Better  work/life  balance 

46% 

3 

More  vacation  time 

36% 

4 

Large  signing  bonus 

36% 

5 

Access  to  new 
technology  projects 

35% 

6 

More  responsibility 

32% 

7 

More  training 

28% 

8 

New  title 

17% 

9 

Relocation 

16% 

10  Complete  career  change 

16% 

11 

Paid  moving  expenses 

15% 

NOTE:  MULTIPLE  RESPONSES  ALLOWED. 


43%: 


SAID  THEY  WOULDN’T 
CONSIDER  SWITCHING  TO  A  JOB 
WITH  LOWER  COMPENSATION. 


OF  THOSE  WHO  WOULD, 
HERE  ARE  THE  TOP  FIVE 
ENTICEMENTS: 

t  Better  work/life  balance 

2  More  job  satisfaction 

3  Location 

4  Flexibility 

5  Stock  options 


Commitment 

Phobia 


PAUL  GLEN 


ourtship  and  marriage  the  second  time  around  are 
different  from  first  relationships.  The  period  of  ad¬ 
justment  after  divorce  demands  introspection,  and 
,  survivors  typically  emerge  with  new  ideas  about 
themselves,  others  and  the  nature  of  relationships. 

The  specific  challenge  for  those  contemplating  second  mar¬ 
riages  is  making  the  decision  to  commit  again.  Oddly  enough,  the 
numbers  from  Computerworld’ s  2006  Salary  Survey  lead  me  to 
think  that  IT  workers  and  corporate  America  are  in  a  similar  situ¬ 
ation.  They’re  toying  with  the  idea  of  committing  again  after  being 
burned  once.  They  seem  to  recognize  that  they  need  one  another, 
but  they  aren’t  certain  that  they’re  ready  to  trust  again.  IT  workers 
fear  they’ll  be  tossed  out  with  the  next  economic  dip,  and  their  em¬ 
ployers  fear  that  an  expensive  talent  war  may  be  on  the  horizon. 


Everyone  involved 
seems  to  be  in  the 
throes  of  major  com¬ 
mitment  phobia.  I’m  not 
going  to  suggest  that 
there  aren’t  good  rea¬ 
sons  on  both  sides,  but 
it  seems  a  rather  un¬ 
fortunate  state  of  exis¬ 
tence,  especially  during 
a  period  characterized 
by  such  a  good  busi¬ 
ness  climate.  Corporate 
profits  are  up.  The 
stock  market  has  risen 
to  prebust  levels,  and 
despite  spiking  energy 
prices,  inflation  seems 
generally  under  control. 

The  U.S.  Federal  Re¬ 
serve  has  even  stopped 
raising  interest  rates  (for  now). 
This  is  the  economic  equivalent  of 
springtime  in  Paris.  If  workers  and 
managers  can’t  learn  to  trust  again 
here  and  now,  will  they  ever? 

A  few  key  findings  from  this 
year’s  survey  fill  out  the  picture 
that  I  see  every  day  in  my  travels 
as  a  consultant.  First,  consider  the 
near-flat  salary  numbers.  Despite 


megaprofits  in  some 
industries,  the  purse 
strings  are  still  being 
held  tightly. 

Second,  and  more 
important,  the  increas¬ 
ing  use  of  one-time 
compensation  tools, 
such  as  signing  bonuses 
and  annual  bonuses, 
rather  than  more  per¬ 
manent  commitments 
to  salary  are  signs  of 
failure  to  commit.  Fi¬ 
nally,  the  number  of 
staffers  saying  that 
they  are  passively,  if 
not  actively,  looking  for 
new  jobs,  signals  that 
this  isn’t  just  a  one¬ 
sided  fear. 

So  in  this  environment,  compa¬ 
nies  commit  only  in  special  cases, 
accepting  the  necessity  of  captur¬ 
ing  rare  talent.  And  even  then,  they 
don’t  want  to  overpromise.  No  one 
wants  the  long-term  pension  li¬ 
abilities  of  GM  or  United  Air  Lines, 
living  with  the  consequences  of 
promises  that  might  be  impossible 
to  keep. 


And  staffers  no  longer  believe  in 
the  grand  missions  of  their  corpo¬ 
rations.  They  dismiss  with  an  eye 
roll  the  ubiquitous  statement  that 
“people  are  our  most  important  as¬ 
set.”  No  one  treats  their  most  valu¬ 
able  assets  like  they’ve  been  treated 
over  the  past  five  years. 

Managers  are  expected  to  have 
one  eye  on  the  income  statement 
and  the  other  on  the  stock  price. 
Employees  have  one  eye  on  their 
work  and  the  other  on  the  help- 
wanted  ads.  There  are  no  eyes  left 
for  each  other. 

Perhaps  I’m  just  pining  for  some¬ 
thing  that  never  was  or  never 
should  have  been.  But  it  seemed 
like  work  was  more  exciting  and 
fun  when  employers  and  employees 
believed  in  something  more  than 
unvarnished  self-interest. 

Will  we  dare  to  trust  again?  Stay 
tuned.  Despite  fears  of  being  more 
vulnerable,  both  sides  know  that 
amazing  creativity  and  productivity 
happen  only  when  there’s  at  least 
a  hint  of  that  old-fashioned  loyalty 
—  and  trust.  * 


COMPANIES 
COMMIT  ONLY 
IN  SPECIAL 
CASES,  ACCEPTING 
THE  NECESSITY  OF 
CAPTURING  RARE  TAL¬ 
ENT.  AND  EVEN  THEN, 
THEY  DON’T  WANT 
TO  OVERPROMISE. 

NO  ONE  WANTS  THE 
LONG-TERM  PENSION 
LIABILITIES  OF  GM  OR 
UNITED  AIR  LINES. 


’fv: 

,V  ■■ 


:  ■  jVtafe 


■  ■■• 


You're  finally  getting  your  enterprise 
information  under  control. 

NOW,  YOUR  MOBILE  USERS  WANT 
TO  ACCESS  IT  ON  ANY  DEVICE. 


When  busin 
get  serious  a 

IN  FORM  A1 


ILI 


Ready  to  get  serious  about  mobilizing  your  enterprise?  Choose  the  company  that  81  of  Fortune  100  organization 
deliver  decision-ready  information  to  the  point  of  action  while  giving  you  the  IT  control  you  need:  Sybase.  Leveragi 
leading  software,  our  powerful,  new  Information  Anywhere®  Suite  provides  modular  components  for  email/PIM,  h< 
management  and  security,  and  enterprise  application  enablement.  So  if  you’re  ready  to  make  the  Unwired  Enterprise 
help  you  deliver  some  serious  results.  To  learn  more,  visit  www.sybase.com/getserious22 
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COMPUTERWORLD 

SALARY 

SURVEY 


2006 


SENIOR  MANAGEMENT  POSITIONS 

ClO/vice 

Chief 

Director 

Director 

Internet 

president 

technology 

of  systems 

of  IT 

technology 

of  IT 

officer 

development 

operations 

strategist 

4.2% 

3.5% 

4% 

3.4% 

2.9% 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

$143,921 

$134,871 

$134,351 

$101,136 

$106,867 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

$31,208 

$26,422 

$25,957 

$12,165 

$12,509 

Total 

Total 

Total 

Total 

Total 

$175,129 

$161,293 

$160,308 

$113,301 

$119,376 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

$168,110 

$155,875 

$154,191 

$109,627 

$116,005 

• 

AlfFRADF  TOT  A 

COMPENSATED! 

N  BY  INDUSTRY 

• 

ii  u  ■  inuuuiiti 

Services/consulting 

(computer) 

$188,678 

Services/consulting 

(computer) 

$154,345 

Services/consulting 

(computer) 

$157,810 

Education 

$83,085 

Services/consulting 

(computer) 

$121,446 

Manufacturing 

Manufacturing 

Government 

Finance/accounting 

(noncomputer) 

Telecommunications 

(noncomputer) 

$191,026 

$117,447 

$166,550 

$122,628 

$118,745* 

Education 

Health  care 

Health  care 

Banking 

Education 

$125,345 

$104,808* 

$141,329 

$107,770 

$104,625* 

Entertainment/ 

advertising 

$192,873* 

Manufacturing 

(noncomputer) 

$167,876 

Government 

$88,659 

Finance/accounting 

$190,498 

Services/consuiting 

Health  care 

Banking 

(computer) 

$182,078 

$187,206 

$134,096 

Banking 

$151,732 

Manufacturing 

(computer) 

$164,121* 

Legal/insurance/ 
real  estate 

$128,965 

Legal/insurance/ 

real  estate 

Services/consulting 

Finance/accounting 

$190,719 

(noncomputer) 

$160,300* 

$135,814 

Government 

Services/consulting 

$125,806 

(noncomputer) 

$112,748 

RARF  TMTAI  mi 

APFNSATION  RY 

mMPANY  RFVF 

wwlnrllll  I  lit.  V  b 

IIUL 

Less  than  S100M 

Less  than  3100M 

Less  than  S100M 

Less  than  S100M 

Less  than  $100M 

$141,372 

$123,000 

$135,186 

$90,282 

$83,083 

$100Mto$999.9M 

S100M  to  S999.9M 

S100M  to  S999.9M 

S100M  to  $999.9M 

S100M  to  S999.9M 

$184,931 

$174,578 

$148,210 

$119,617 

$111,886 

SIB  to  $10B 

SIB  to  S10B 

SIB  to  S10B 

SIB  to  S10B 

SIB  to  S10B 

$217,989 

$230,195 

$176,163 

$139,429 

$119,944 

More  than  S10B 

More  than  S10B 

More  than  S10B 

More  than  S10B 

More  than  S10B 

$212,247 

$224,771* 

$189,175 

$176,482 

$140,633 

]  MIDDLE  MANAGEMENT  POSITIONS  { 

Computer 

Help  desk/ 

Information 

operations 

tech  support 

security 

IT  manager 

manager 

manager 

manager 

3.0% 

2.7% 

4.4% 

2.7% 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

$76,137 

$70,203 

$96,938 

$79,329 

Bonus 

Bonus 

Bonus 

Bonus 

$5,671 

$7,206 

$12,560 

$6,378 

Total 

Total 

Total 

Total 

$81,808 

$77,409 

$109,498 

$85,707 

2005  total 

2005  total 

2005  total 

2005  total 

$79,462 

$75,382 

$104,918 

$83,433 

IP  TATA  1  OAlini 

'Ijn  IT1AII  nu  iti  r 

uiAvnu 

*******  AVERAl 

IE  TOTAL  COMPE 

:NSATION  BY  INL 

lUSTRY  ******* 

Education 

Services/consulting 

Banking 

Manufacturing 

(noncomputer) 

$62,702 

(computer) 

$83,794 

$114,922 

$84,570 

Government 

Government 

$78,108* 

Education 

$93,123 

Education 

$51,491 

$64,366 

Manufacturing 

(noncomputer) 

Legal/insurance/ 

Manufacturing 

(noncomputer) 

Government 

$94,685 

real  estate 

$97,267 

$113,497 

$80,937 

Health  care 

Services/consulting 

Health  care 

$75,535* 

Manufacturing 

(noncomputer) 

(computer) 

$98,773* 

$81,208 

$85,031 

Services/consulting 

Finance/accounting 

(computer) 

Retail  trade 

$71,827* 

$129,837* 

$101,022 

Defense/aerospace 

Banking 

Government 

$53,484* 

$102,500* 

$94,048 

Health  care 

Legal/insurance/ 

Health  care 

$105,060* 

real  estate 

$69,030* 

$98,228 

Finance/accounting 

Finance/accounting 

$89,414* 

$91,859 

:  ••••AVERAGE  TOTAL  COMPENSATION  BY  COMPANY  REVENUE  •••  : 

Less  than  S100M 

Less  than  S100M 

Less  than  3>100M 

Less  than  S100M 

$65,256 

$59,158 

$88,640 

$69,134 

S100M  to  S999.9M 

$100M  to  $999.9M 

S100M  to  S999.9M 

S100M  to  S999.9M 

$87,807 

$76,996 

$97,017 

$89,651 

SIB  to  S10B 

SIB  to  S10B 

SIB  to  S10B 

SIB  to  S10B 

$92,396 

$90,161 

$107,692 

$105,542 

More  than  S10B 

More  than  S10B 

More  than  $10B 

More  than  S10B 

$101,011 

$104,867 

$135,628 

$116,551 

%  Average  percentage  increase,  2005-2006 

Gray  text:  The  total  base  tor  this  job  title  in  this  particular  industry  or  company  size  was  fewer  than  30  responses  but  more  *  The  total  base  for  this  job  title  in  this  particular  industry  or  company  size  was  fewer  than 

than  15.  These  figures  should  be  used  for  comparison  only,  because  they  don't  constitute  a  statistically  significant  sampling.  16  responses  but  more  than  nine.  These  figures  should  be  used  for  comparison  only. 


Bv  the  Numbers 

HOT  INDUSTRIES 

LARGEST  INCREASES  IN  TOTAL 
COMPENSATION,  BY  INDUSTRY: 

Mining,  agriculture,  construction 
and  engineering 

4.9% 

Defense/aerospace 

4% 

Food  and  beverage 

3.9% 

Business  services/consulting 
(noncomputer) 

3.8% 

Entertainment,  marketing  and  advertising  3.7% 


A  SAMPLING  OF  OTHER  JOB  TITLES 


Chief  security 
officer 

Director  of 
e-commerce 

Communications 

manager 

Database 

manager 

Data 

warehousing 

manager 

E-commerce 

manager 

Internet/ 

intranet 

manager 

Business 

intelligence 

analyst 

5.7% 

5.5% 

2% 

3.4% 

4.2% 

1.2% 

4.4% 

3.6% 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

$130,677 

$124,354 

$80,474 

$91,358 

$103,193 

$93,346 

$81,806 

$72,173 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

$25,786 

$26,583 

$9,643 

$5,803 

$13,259 

$15,684 

$5,868 

$3,872 

Total 

Total 

Total 

Total 

Total 

Total 

Total 

Total 

$156,463 

$150,937 

$90,117 

$97,161 

$116,452 

$109,030 

$87,674 

$76,045 

Base:  35 

Base:  69 

Base:  110 

Base:  87 

Base:  37 

Base:  33 

Base:  65 

Base:  145 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

$148,058 

$143,082 

$88,351 

$93,945 

$111,795 

$107,691 

$83,977 

$73,421 

Got  Questions  About 
Application  Performance? 

Computerworld’s  IT  Executive  Summit  Has  the  Answers 


Today’s  businesses  are  challenged  in  delivering  high 
perfomance  applications.  Whether  it’s  system  com¬ 
plexity,  overcoming  the  barriers  to  enabling  rapid 
change  and  collaboration,  or  discovering  problems  too 
late  to  effectively  fix  them,  the  hurdles  are  daunting 
for  those  leading  today's  application  deployment. 

To  overcome  the  obstacles,  IT  managers  need  to 
identify  and  elimate  performance  production  problems 
early  and  build  performance  into  applications  from  the 
earliest  phases  of  the  development  life  cycle,  rather 
than  attempting  to  test  too  late. 

This  IT  Executive  Summit  will  explore  how  companies 
have  effectively  dealt  with  these  challenges  and  how 
they’ve  found  solutions.  And  it  will  outline  the  ques¬ 
tions  IT  needs  to  ask  and  answer  to  optimize  appli¬ 
cation  performance  throughout  their  organization. 

Apply  to  attend  Computerworld's  complimentary 
half-day  IT  Executive  Summit:  Ahead  of  the  Cuive: 
Optimizing  Application  and  Business  Performance. 

*  Complimentary  registration  is  restricted  to  qualified 
IT  directors  only. 


December  5,  2006  •  Irvine,  California 

Irvine  Marriott 
8:00am  to  Noon 


Ahead  of  the  Curve:  Optimizing 
Application  and  Business  Performance 


8:00am  to  8:30am  Registration  and  Networking  Breakfast 


8:30am  to  8:40am 


8:40am  to  9:20am 


a  Introduction  and  Overview 

Ron  Milton,  Executive  Vice  President,  Computerworld 


Market  Overview  and  Trends 

Michael  Hugos,  Former  CIO  and  Author  of  Essentials  of  Supply 
Chain  Management  and  Building  the  Real  Time  Enterprise: 

An  Executive  Briefing 


9:20am  to  10:00am  Application  Performance  at  Broadcom  Corporation: 

An  End-User  Case  Study 

Ken  Venner,  Senior  Vice  President  and  Chief  Information  Officer, 
Broadcom  Corporation 


10:00am  to  10:15am  Refreshment  and  Networking  Break 


10:15am  to  10:50am  Application  Performance  Assurance  Case  Studies: 

It  Pays  to  be  Predictable 

Andrew  Hittle,  Vice  President,  Quality  Assurance  Solutions,  Compuware 


10:50am  to  1  1 :25am  Application  Performance:  An  End-User  Case  Study 

Kenneth  Speller,  Director  of  Quality  Assurance,  Chicago  Board  of  Trade 

1 1 :25am  to  Noon  Panel  Discussion 

Moderator:  Ron  Milton,  Executive  Vice  President,  Computerworld 
Panelists:  Michael  Hugos,  Former  CIO  and  Author  of  Essentials  of  Supply 
Chain  Management  and  Building  the  Real  Time  Enterprise:  An  Executive 
Briefing ;  Andrew  Hittle,  Vice  President,  Quality  Assurance  Solutions, 
Compuware;  Ken  Venner,  Senior  Vice  President  and  Chief  Information 
Officer,  Broadcom  Corporation;  Kenneth  Speller,  Director  of  Quality 
Assurance,  Chicago  Board  of  Trade 


Apply  for  registration  today 

Contact  Ryan  Galvin  at  888-299-01  55 
or  visit:  www.itexecutivesummit.com 


•  ••• 

••• 


COMPUTERWORLD 

IT  EXECUTIVE  SUMMIT 


APPLICATION  PERFORMANCE 


Sponsored  by 

COMPUWARE 


m 
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Average  salary 

$71,440 

Bonus 

$6,516 

Total 

$77,956 

2005  total 

$76,914 


Product 

manager 

Application 

development 

manager 

Project 

manager 

2.5% 

3.3% 

2.8% 

Average  salary 

$96,030 

Average  salary 

$96,550 

Average  salary 

$89,766 

Bonus 

$10,968 

Bonus 

$9,366 

Bonus 

$7,222 

Total 

$106,998 

Total 

$105,916 

Total 

$96,988 

2005  total 

$104,429 

2005  total 

$102,539 

2005  total 

$94,370 

■  AVERAGE  TOTAL  COMPENSATION  BY  INDUSTRY* 


Education 

$61,315 

Services/consulting 

(computer) 

$111,492 

Services/consulting 

(computer) 

$108,370 

Services/consulting 

(computer) 

$97,536 

Manufacturing 

(noncomputer) 

Manufacturing 

Manufacturing 

Government 

(computer) 

$113,375 

(noncomputer) 

$107,655 

$87,005 

Government 

Health  care 

$70,034 

Telecommunications 

$105,554* 

Government 

$88,092 

$90,700 

Health  care 

Finance/accounting 

$67,894 

Finance/accounting 

$118,668 

$108,980 

Legal/insurance/ 

Manufacturing 

real  estate 

Manufacturing 

(noncomputer) 

$91,574* 

(computer) 

$127,550 

$100,752 

Telecommunications 

Legal/insurance/ 

107,824* 

Health  care 

$92,036 

real  estate 

$93,778 

Services/consulting 

(computer) 

Legal/insurance/ 

Banking 

$84,492* 

real  estate 

$101,017 

$95,348 

Telecommunications 

Banking 

$134,475 

$98,361 

AVERAGE  TOTAL  COMPENSATION  BY  COMPANY  REVENUE* 


Less  than  S100M 

$68,865 

Less  than  S100M 

$92,088 

Less  than  S100M 

$89,745 

Less  than  $100M 

$84,274 

S100M  to  S999.9M 

$78,050 

S100M  to  S999.9M 

$102,439 

SIOOMto  S999.9M 

$99,724 

$100M  to  S999.9M 

$91,687 

$1B  to  $10B 

$113,957 

$1B  to  $10B 

$107,753 

$1B  to  $10B 

$113,020 

SIB  to  $10B 

$101,431 

More  than  $10B 

$92,632 

More  than  $10B 

$119,307 

More  than  $10B 

$131,352 

More  than  $10B 

$105,607 

STAFF  AND  ENTRY-LEVEL  POSITIONS 


Database 

administrator 

Help  desk/ 
tech  support 
specialist 

Information 

security 

specialist 

Technology/ 

business 

analyst 

Network  and 
wireless 
network 
engineer 

Network 

administrator 

Programmer/ 

analyst 

2.3% 

2.8% 

3.4% 

3.1% 

2.7% 

3.1% 

2.6% 

Average  salary 

$79,098 

Average  salary 

$46,016 

Average  salary 

$76,087 

Average  salary 

$68,579 

Average  salary 

$68,986 

Average  salary 

$52,699 

Average  salary 

$65,030 

Bonus 

$4,646 

Bonus 

$2,466 

Bonus 

$5,881 

Bonus 

$3,783 

Bonus 

$5,332 

Bonus 

$2,371 

Bonus 

$3,525 

Total 

$83,744 

Total 

$48,482 

Total 

$81,968 

f§:  Total 

$72,362 

Total 

$74,318 

Total 

$55,070 

Total 

$68,555 

2005  total 

$81,898 

2005  total 

$47,181 

2005  total 

$79,287 

2005  total 

$70,219 

2005  total 

$72,374 

2005  total 

$53,419 

2005  total 

$66,802 

Services/consulting 

(computer) 

$91,076 

Education 

$40,149 

Services/consulting 

(computer) 

$85,083 

Services/consulting 

(computer) 

$75,897 

IT/computer  services/ 
consulting 

$73,458 

Manufacturing 

(noncomputer) 

Services/consulting 

(computer) 

$64,269 

$54,899 

Services/consulting 

Government 

(computer) 

Banking 

Manufacturing 

Telecommunications 

Health  care 

Legal/insurance/ 

$75,238 

$53,333 

$70,364 

(noncomputer) 

$68,168 

$79,151 

$50,947 

real  estate 

$68,362 

Health  care 

Manufacturing 

Government 

Health/medical 

Government 

$79,755 

(noncomputer) 

$45,539 

$83,781 

Government 

$67,837 

services 

$87,696 

$58,755 

Manufacturing 

(noncomputer) 

Manufacturing 

Legal/insurance/ 

Education 

$67,403 

(noncomputer) 

Government 

real  estate 

Health  care 

Manufacturing 

(noncomputer) 

$44,995 

$82,550 

$47,789 

$82,648 

$61,390 

Government 

$77,493 

Services/consulting 

$62,906 

Legal/insurance/ 

Health  care 

Finance/accounting 

Legal/insurance/ 

(computer) 

real  estate 

$87,941 

$46,189 

$84,053 

real  estate 

$70,856 

Government 

$74,353 

$54,349 

Education 

$57,228 

Legal/insurance/ 

Defense/aerospace 

Legal/insurance/ 

Education 

$67,554 

real  estate 

$47,403 

$79,265 

Education 

$56,659 

Education 

$57,597 

real  estate 

$59,569 

Health  care 

$67,171 

Health  care 

$79,750* 

Finance/accounting 

$80,777 

Finance/accounting 

$47,596 

Banking 

$71,581 

Finance/accounting 

$87,636* 

Banking 

$56,156 

Retail  trade 

$69,412 

Telecommunications 

Retail  trade 

Banking 

$95,568* 

Finance/accounting 

Banking 

Services/consulting 

Finance/accounting 

$81,653 

$52,394 

$83,393 

$66,740* 

(noncomputer) 

$50,964 

$78,651 

KAUt  1  U  1 AL  bull 

nut »•»»»»»»»» 

Less  than  S100M 

Less  than  $100M 

Less  than  $100M 

Less  than  $100M 

Less  than  S100M 

Less  than  $100M 

Less  than  $1QGM 

$72,257 

$43,945 

$79,041 

$62,252 

$69,558 

$51,522 

$62,585 

$100M  to  S999.9M 

$100M  to  S999.9M 

S100M  to  S999.9M 

$100M  to  S999.9M 

S100M  to  S999.9M 

S100M  to  S999.9M 

S100M  to  S999.9M 

$84,137 

$49,460 

$78,732 

$69,422 

$70,438 

$56,790 

$67,994 

$1B  to  $10B 

$1B  to  $10B 

SIB  to  $10B 

$1B  to  S10B 

SIB  to  $10B 

SIB  to  S10B 

SIB  to  S10B 

$89,383 

$55,509 

$86,023 

$78,425 

$80,451 

$67,394 

$72,268 

More  than  $10B 

More  than  $10B 

More  than  $10B 

More  than  $10B 

More  than  $10B 

More  than  S10B 

More  than  $10B 

$96,812 

$56,590 

$89,373 

$83,163 

$82,565 

$70,465 

$77,413 

%  Average  percentage  increase.  2005-2006 

Gray  text:  The  total  base  for  thie  job  title  in  this  particular  industry  or  company  size  was  fewer  than  30  responses  but  more 
than  15.  These  figures  shoufd  be  used  for  comparison  only,  because  they  don't  constitute  a  statistically  significant  sampling. 


*  The  total  base  for  this  job  title  in  this  particular  industry  or  company  size  was  fewer  than  16 
responses  but  more  than  nine.  These  figures  should  be  used  for  comparison  only. 


ic  iNumDers 


A  SAMPLING  OF  OTHER  JOB  TITLES 


COLO  INDUSTRIES 

Database 

developer/ 

modeler 

E-commerce 

specialist 

Messaging 

specialist 

Network 

architect 

Storage 

administrator/ 

architect/ 

engineer 

Quality 

assurance 

specialist 

Technical 

trainer 

Webmaster 

SMALLEST  INCREASES  IN  TOTAL 

2.6% 

1.1% 

2.2% 

5.3% 

4% 

MEM 

1.9% 

3.4% 

COMPENSATION,  BY  INDUSTRY: 

Computer  dealer/reseller 

-1.6% 

Average  salary 

$68,421 

Average  salary 

$68,798 

Average  salary 

$73,139 

Average  salary 

$91,787 

Average  salary 

$83,687 

Average  salary 

$65,776 

Average  salary 

$62,810 

Average  salary 

$54,159 

Automotive 

1.6% 

Bonus 

$4,367 

Bonus 

$3,561 

Bonus 

$4,578 

Bonus 

$5,965 

Bonus 

$9,771 

Bonus 

$4,124 

Bonus 

$3,816 

Bonus 

$1,066 

Government 

2.2% 

Total 

$72,788 

Total 

$72,359 

Total 

$77,717 

Total 

$97,752 

Total 

$93,458 

Total 

$69,900 

Total 

$66,626 

Total 

$55,225 

Wholesale  trade 

2.5% 

Base:  53 

Base:  38 

Base:  32 

Base:  54 

Base:  106 

Base:  117 

Base:  91 

Base:  67 

Education 

2.7% 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

Nonprofit 

“2.7% 

$70,951 

$71,585 

$76,011 

$92,800 

$89,886 

$67,707 

$65,404 

$53,429 

Leaders  Wanted/CIO  Challenge  Series 


Challenge  #2: 

Turn  a  thousand  versions  of  your  numbers  into  one. 


Solution: 

Hyperion — your  management  system  for  the  global  enterprise. 

It’s  hard  to  see  the  insight  in  the  numbers  when  they  come  from  a  thousand 
different  spreadsheets  and  dozens  of  business  intelligence  tools.  That’s  why 
the  world’s  leading  CIOs  and  CFOs  turn  to  Hyperion.  With  Hyperion1  System  "9, 
you  can  dramatically  simplify  the  management  of  master  data  and  insure 
data  quality  across  all  enterprise  systems — analytical  and  financial 
applications,  transactional  systems,  data  warehouses,  and  more.  So  you  can 
deliver  numbers  that  inspire  confidence.  And  insights  that  inspire  action. 


FREE  ARTICLE  FROM  HARVARD  BUSINESS  REVIEW 
How  do  other  IT  leaders  deliver  financial  clarity  and 
business  intelligence?  Discover  new  insights  and  best 
practices  from  the  Harvard  Business  Review  and  Hyperion. 
Go  to  www.hyperion.com/go/numbers 


#  Hyperion" 

The  future  in  sight 


©  2006  Hyperion  Solutions  Corporation.  All  rights  reserved.  "Hyperion,"  the  Hyperion  logo,  and  Hyperion's  product  names  are  trademarks  of  Hyperion.  References  to  other  companies  and  their  products 
use  trademarks  owned  by  the  respective  companies  and  are  for  reference  purpose  only. 
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COMPUTERWORLD 

SALARY 

SURVEY 

2006 


STAFF  AND  ENTRY-LEVEL  POSITIONS 


Project 

leader 

Software 

developer 

Software 

engineer 

Systems 

administrator 

Systems 

architect 

Systems 

programmer 

Systems 

analyst 

Senior 

systems 

analyst 

Technician 

Web 

developer 

M 

3.1% 

2.6% 

3.1% 

2.3% 

2.1% 

3.8% 

2.6%  .  : 

'  1.3%  ' 

4.8% 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

$78,100 

$73,412 

$80,439 

$63,303 

$90,969 

$80,690 

$65,396 

$79,187 

$45,826 

$59,531 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

$4,950 

$4,807 

$4,306 

$3,573 

$9,295 

$5,649 

$3,090 

$4,204 

$2,015 

$2,821 

Total 

Total 

Total 

Total 

Total 

Total 

Total 

Total 

Total 

Total 

$83,050 

$78,219 

$84,745 

$66,876 

$100,264 

$86,339 

$68,486 

$83,391 

$47,841 

$62,352 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

2005  total 

$81,081 

$75,883 

$82,575 

$64,881 

$97,985 

$84,571 

$65,979 

$81,270 

$47,217 

$59,508 

■  AVERAGE  TOTAL  COMPENSATION  BY  INDUSTRY* 


Services/consulting 

(computer) 

$79,495 

Manufacturing 

(noncomputer) 

$88,380 

Government 

$85,744 

Finance/accounting 

$80,463 

Defense/aerospace 

$98,907* 

Health  care 

$68,563* 

Education 

$65,347* 

Transportation/ 

logistics 

$78,503* 


Services/consulting 

(computer) 

$79,043 

Legal/insurance/ 
real  estate 

$71,304 

Banking 

$78,341 

Health  care 

$72,974 

Manufacturing 

(computer) 

$94,477 

Telecommunications 

$86,079 

Government 

$73,121 

Finance/accounting 

$86,950 


Services/consulting 

(computer) 

$83,486 

Manufacturing 

(computer) 

$98,165 

Defense/aerospace 

$87,779 

Manufacturing 

(noncomputer) 

$77,817 

Telecommunications 

$81,155 

Finance/ 

accounting 

$95,475 

Legal/insurance/ 
real  estate 

$80,073 


Services/consuiting  Services/consulting  Services/consulting  Services/consulting 


(computer) 

$68,869 

Manufacturing 

(noncomputer) 

$61,807 

Education 

$53,913 

Government 

$61,069 

Health  care 

$68,411 

Legal/insurance/ 
real  estate 

$66,606 

Entertainment/ 

advertising 

$70,622 


(computer) 

$98,730 

Defense/aerospace 

$101,250 

Finance/accounting 

$116,508 

Health  care 

$84,332 

Banking 

$119,187 

Legal/insurance/ 
real  estate 

$95,118 

Manufacturing 

(computer) 

$126,743 

Telecommunications 

$99,849 


(computer) 

$80,998 

Education 

$65,553 

Legal/insurance/ 
real  estate 

$88,324 

Government 

$73,817* 

Finance/accounting 

$95,000* 

Retail  trade 

$103,068* 


(computer) 

$70,874 

Health  care 

$61,987 

Manufacturing 

(noncomputer) 

$67,987 

Finance/accounting 

$73,115 

Legal/insurance/ 
real  estate 

$76,333 

Government 

$67,179 

Energy/utilities 

$70,818 

Education 

$56,756 


Telecommunications 

$74,825 

••••  AVERAGE  TOTAL  COMPENSATION  BY  COMPANY  REVENUE 


Manufacturing 

(noncomputer) 

$79,341 

Services/consulting 

(computer) 

$90,307 

Health  care 

$76,394 

Government 

$79,114 

Legal/insurance/ 
real  estate 

$82,449 

Finance/accounting 

$93,342 

Education 

$66,487 

Banking 

$90,316 


Education 

$40,655 

Services/consulting 

(computer) 

$48,077 


(noncomputer) 

$51,014 

Health  care 

$44,262 

Government 

$51,413 

Telecommunications 

$59,209* 

Transportation/ 

logistics 

$45,527* 


Services/consuiting 

(computer) 

$64,781 

Education 

$44,107 

finance/accounting 

$64,542* 

Government 

$71,715* 


Less  than  S100M 

$73,026 

Less  than  S100M 

$69,797 

Less  than  S100M 

$76,632 

Less  than  $100M 

$58,025 

Less  than  $100M 

$85,170 

Less  than  S100M 

$71,315 

Less  than  S100M 

$61,154 

Less  than  S100M 

$75,529 

Less  than  $100M 

$41,159 

Less  than  S100M 

$52,146 

S100M  to  S999.9M 

$74,002 

$100M  to  S999.9M 

$80,369 

$100M  to  S999.9M 

$84,324 

S100M  to  S999.9M 

$67,140 

$100M  to  S999.9M 

$96,225 

$100M  to  S999.9M 

$86,363 

$100M  to  S999.9M 

$65,876 

$100M  to  $999.9M 

$81,928 

S100M  to  S999.9M 

$48,139 

S100M  to  S999.9M 

$63,379 

$1B  to  S10B 

$85,011 

$1B  to  S10B 

$83,132 

$1B  to  S1QB 

$87,049 

$1B  to  $10B 

$75,344 

$1B  to  S10B 

$102,085 

$1B  to  $1QB 

$92,084 

SIB  to  S10B 

$75,096 

$1B  to  S10B 

$85,121 

SIB  to  $1QB 

$53,379 

SIB  to  S10B 

$78,352 

More  than  S10B 

$100,185 

More  than  $10B 

$89,092 

More  than  S10B 

$91,528 

More  than  $10B 

$79,566 

More  than  $10B 

$109,942 

More  than  $10B 

$92,797 

More  than  $10B 

$77,536 

More  than  $10B 

$89,319 

More  than  S10B 

$62,837 

More  than  $108 

$73,953 

%  Average  percentage  increase.  2005-2006 

Gray  text:  The  total  base  for  this  job  title  in  this  particular  industry  or  company  size  was  fewer  than  30  responses  but  more 
than  15.  These  figures  should  be  used  for  comparison  only,  because  they  don't  constitute  a  statistically  significant  sampling. 


*  The  total  base  for  this  job  title  in  this  particular  industry  or  company  size  was  fewer  than  16 
responses  but  more  than  nine.  These  figures  should  be  used  for  comparison  only. 


Computer-world's  20th 
Annual  Salary  Survey 
was  administered  via  the 
Internet.  Responses  from 
both  Computerworld 
print  subscribers  and 
visitors  to  Computer- 
world.com  were  inciuded 
in  the  survey  results. 

The  collection  of  sur¬ 
vey  data  began  May  5 
and  concluded  July  14, 
2006.  A  total  of  16,866 


people  responded  to  the 
survey.  Of  those  respon¬ 
dents,  14,740  were  em¬ 
ployed  full  or  part  time 
and  were  eligible  to  com¬ 
plete  the  entire  survey. 

At  the  95%  confidence 
level,  the  margin  of  error 
for  this  sample  size  is 
less  than  +/-1  percentage 
point. 

Respondents  were 
asked  to  report  the  per¬ 


centage  change  in  their 
compensation  from  2005 
to  2006.  Compensation 
figures  for  2005  were  cal¬ 
culated  based  on  the  per¬ 
centage  change  reported 
by  the  respondents. 


ONLINE 

For  a  detailed 

look  at 

how  we  condi 

acted 

this  survey,  visit  our 

Web 

site:  www.computer 

world. 

com/06/salaries 

WHO  THEY  ARE 


EIGHTY-THREE  percent 
of  our  respondents  were 
men,  92%  were  employed 
full  time,  and  47%  said  a 
bachelor’s  degree  was  their 
highest  level  of  education. 
Respondents  had  an  aver¬ 
age  of  15  years  in  IT,  and 
their  average  age  was  43. 
Forty-eight  percent  indicat¬ 
ed  that  they  had  some  level 
of  computer  certification. 

The  companies  they 
work  for  employ  an  average 
of  9,607  total  employees 


and  an  average  of  997  IT 
staffers.  The  average  2006 
revenue  at  their  employers 
is  $2.9  billion.  Thirty-eight 
percent  work  for  public 
companies,  while  35%  work 
for  private  companies;  10% 
work  in  education,  10%  in 
government  and  7%  for 
nonprofits. 

Eighty-four  percent 
reported  that  they  held 
the  same  job  last  year. 
Forty-five  percent  of  our 
respondents  indicated  that 
they  were  in  management, 
and  55%  said  they  held 
staff  or  technical  positions. 


The  most  well-represented 
industry  in  the  sample  was 
IT  services,  with  14%  say¬ 
ing  they  worked  in  that  field. 
Nineteen  percent  reported 
living  in  the  South  Atlantic 
region  of  the  country,  and 
another  29%  reported  living 
in  the  North  Central  region, 
making  those  geographic 
areas  the  best  represented. 
Four  percent  said  they  were 
employed  as  contractors  or 
consultants. 

Pay  rates  for  contractors 
and  consultants  can  be  found 
at  www.computervioi1d.com/ 
06/salaries. 


Hih 


Innovation,  Intertwined. 

When  networks  converge,  it  all  comes  together  without  a  second  thought. 
Voice  and  data,  delivered  together,  providing  communication  without 
restriction.  With  supreme  flexibility.  So  go  ahead,  accomplish  anything  you 
desire.  Because  now  you  can  do  anything,  connect  with  anyone.  Anytime, 
anywhere.  With  NEC  UNIVERGE31'  Solutions. 


IT  SERVICES  AND  SOFTWARE  MOBILE/BROADBAND  NETWORKING  COMPUTERS  SEMICONDUCTORS  IMAGING  AND  DISPLAYS 


www.necunified.com 


Empowered  by  Innovation 


©  2006  NEC  Corp.  NEC  and  the  NEC  logo 
are  registered  trademarks  of  NEC  Corporation. 
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ON  THE  LOOKOUT 

WHICH  ONE  OF  THE 
FOLLOWING  BEST  DESCRIBES 
YOUR  JOB  SEARCH  STATUS? 


Not  looking  for 
a  new  job 


Passively  looking  for  a 
new  job  at  a  different 
company 


Seeking  a  new  job  within 
the  same  company 


Actively  looking 
for  a  new  job 
at  a  different 
company 


TOP  FIVE  REASONS  THEY’RE 
LOOKING  FOR  A  JOB: 

1  Looking  for  higher  compensation  63% 


2  Career  opportunities 


3  Seeking  more  interesting/ 
challenging  work 


47% 

43% 


4  Looking  for  more  personal 
fulfillment 


5  Seeking  more  responsibility 


41% 

29% 


TOP  FIVE  REASONS  THEY 
AREN’T  LOOKING  FOR  A  JOB: 


\  Satisfied  with  current 
job  responsibilities 


70% 


2  Satisfied  with  current 
compensation 


3  Satisfied  with  company  culture 


50% 

48% 


4  Job  market  is  poor/ 
few  opportunities 


21% 


5  Other  17% 

NOTE:  MULTIPLE  RESPONSES  ALLOWED. 


JOHANNA  ROTHMAN 


A  Slow  Thaw 


THIS  YEAR,  it’s  clear  that  the  economy  has  changed. 

Computer-world’s  2006  Salary  Survey  shows  that 
fewer  people  are  seeing  their  pay  decline.  Some  are 
getting  raises.  The  overall  change  in  base  salary  is 
flat.  The  frozen  job  market  is  starting  to  melt,  giving 
less  advantage  to  employers  and  more  to  employees. 

So  what  does  that  mean  for  both  sides?  Look  at  the  numbers: 
47%  of  all  the  IT  workers  who  responded  to  the  survey  said 
that  they’re  either  actively  or  passively  looking  for  another  job. 
That  could  create  a  huge  movement  in  jobs  in  the  industry  in 
the  coming  year  or  so.  And  29%  of  those  job-seeking  respon¬ 
dents  are  looking  for  more  responsibility.  That’s  a  big  number. 
Remember,  the  cost  of  replacing  an  employee  can  be  as  much 
as  the  employee’s  salary  for  one  year.  At  a  minimum,  it’s  a  few 
months  of  his  salary. 


JOHANNA  ROTHMAN 


Managers,  here’s 
some  free  advice:  Ask 
your  staff  in  one-on-one 
meetings  if  they’re  hap¬ 
py  with  their  responsi¬ 
bilities.  If  not,  determine 
if  there’s  a  way  to  make 
the  work  more  palatable, 
or  even  change  people’s 
responsibilities. 

Employees,  here’s 
your  advice:  Talk  to  your 
manager.  He  may  not 
realize  you’re  unhappy, 
especially  if  he’s  work¬ 
ing  in  crisis  mode  and 
hasn’t  kept  up  with  your 
one-on-one  meetings. 

Another  factor  in 
retention  is  salary  and 
work  environment 
satisfaction:  22%  of  all 
respondents  said  they  aren’t  satisfied 
with  their  compensation,  and  43%  of 
job  seekers  are  looking  for  more  in¬ 
teresting  and  challenging  work.  I  sus¬ 
pect  these  two  are  related  for  many 
people.  An  interesting  work  environ¬ 
ment  is  a  combination  of  what  people 
can  discuss,  how  people  are  treated 
and  what’s  rewarded.  This  means 
it’s  even  more  important  for  manag¬ 
ers  to  consider  how  to  establish  a 
positive  work  culture  and  competi¬ 
tive  reward  system. 

Some  of  the  most  important 
things  are  free  —  meaning  they 
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don’t  cost  money,  not 
that  they  don’t  require 
your  time.  Spending 
time  with  employees  in 
one-on-ones  and  build¬ 
ing  a  trusting  relation¬ 
ship  costs  nothing  but 
time.  Compared  with 
the  cost  of  replacing  an 
employee,  it’s  cheap. 

That  said,  money  still 
talks.  If  we  look  more 
closely  at  the  data, 
we  see  that  a  stagger¬ 
ing  63%  of  the  people 
looking  for  new  jobs 
are  looking  for  more 
money.  It’s  not  1999 
yet,  but  remember,  baby 
boomers  are  starting 
to  retire,  and  there  are 
fewer  trained  people 
ready  to  take  their  place. 

Managers,  if  you  think  you  need 
more  people,  start  being  concerned 
about  where  the  new  folks  are  go¬ 
ing  to  come  from.  And  start  review¬ 
ing  your  salary  data.  Compare  what 
you  pay  to  what  others  pay  in  your 
area  for  similar  jobs.  You  may  be 
unpleasantly  surprised. 

If  you  are  looking  to  hire  people, 
remember  you’re  offering  a  career 
opportunity,  not  a  job.  That’s  good, 
because  that’s  what  people  want. 
They  want  more  interesting  and 
challenging  work. 
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You  may  have  to  reorganize  how 
your  group  does  work.  That’s  OK, 
because  your  bosses  are  probably 
on  your  case  to  produce  more  with 
the  same  number  of  people. 

Consider  moving  to  cross¬ 
functional,  feature-oriented  teams 
for  at  least  some  of  your  product 
development.  A  cross-functional 
team  focused  on  one  feature  or  a  re¬ 
lated  group  of  features  offers  people 
a  chance  to  expand  their  skills  and 
learn  new  ones.  And  all  team  mem¬ 
bers  become  more  familiar  with 
that  part  of  the  product. 

And  employees,  if  you’ve  read  the 
survey  and  found  that  your  salary 
isn’t  stacking  up  to  those  of  your 
peers,  take  this  advice:  Research 
what  your  position  pays  in  a  variety 
of  industries  and  geographical  loca¬ 
tions  and  review  your  accomplish¬ 
ments  over  the  past  year  so  you  can 
start  making  your  case. 

It’s  not  a  job  hunter’s  market  —  at 
least  not  yet.  But  if  you  look  at  the 
trends  from  2005  to  2006,  it’s  clear 
that  employees  feel  better  about 
seeking  new  jobs  and  aren’t  afraid 
to  start  looking  anymore. 

Managers,  remember  that  reten¬ 
tion  is  your  single  best  recruitment 
strategy.  Build  relationships  with 
your  team,  and  consider  how  you 
can  create  more  challenges  at  work. 

Employees,  remember  that  your 
manager  is  only  human.  Have  a  talk 
with  your  manager  and  explain  what 
you  want  out  of  work.  You  might  be 
surprised  to  discover  that  you  can 
find  it  at  your  current  employer. 

And  if  you’ve  decided  to  look  for 
a  new  job  —  have  a  blast!  There  are 
opportunities  out  there  if  you’re 
willing  to  learn  new  things. » 


ONLINE  EXCLUSIVE 

Need  more  advice  about  ask¬ 
ing  fora  raise?  Submit  your 
question  on  our  Web  site,  and  Jo¬ 
hanna  Rothman  will  answer  select 
reader  inquiries  online  all  this  week: 
www.computerworld.eom/06/salaries 


By  2010,  the  increase  in  expense  to  power  and  cool  servers  is  projected  to  be  approximately  four  times  the 
increase  in  new  server  spending.'  The  IBM  System  x3655  Express  can  help  control  rising  energy  costs  starting 
today.  How?  It  comes  with  an  ingenious  technology  called  PowerExecutivef”  which  allows  you  to  allocate 
power  to  each  server,  helping  to  optimize  and  save  you  money.2  Only  IBM  has  it.  The  x3655  is  just  one  of 
many  Express  systems  designed  for  business  performance  computing.  With  IBM,  innovation  comes  standard. 
So  why  waste  energy  on  anything  else? 


AUTOMATICALLY  PUTS 
YOUR  BUSINESS  INTO 
ENERGY-SAVING  MODE. 


IBM  System  x3655  Express 

Mission-critical  availability  and  performance  in  an  affordable  package. 


Monitor  power  consumption  and  allocate  power  where  needed  with  PowerExecutive 
64GB  maximum  low-power  DDR2  memory 


Choose  flexibility  and  robust  I/O  configuration  with  IBM  extended  I/O 


Featuring  the  Next-Generation  AMD  Opteron™  processor  with  AMD  PowerNow!™  technology 


Limited  warranty:  3  years  on-site3 


From 


$2,359 


or  $61/month4 


AMDP 


Opteron 


•All  prices  are  IBM's  estimated  retail  selling  prices  as  of  October  3. 2006.  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  to  end 
users  may  vary.  Products  are  subject  to  availability.  This  document  was  developed  for  offerings  in  the  United  Slates.  IBM  may  not  otter  the  products,  features  01  services 
discussed  in  this  document  in  other  countries.  Prices  subject  to  change  without  notice.  Starting  price  may  not  include  a  hard  drive,  operating  system  or  other  features 
Contact  your  IBM  representative  or  IBM  Business  Partner  tor  the  most  current  pricing  in  your  geography.  1.  Based  on  "IDC,  The  Impact  of  Power  and  Cooling  on  Data 
Center  Infrastructure.'  Document  #201722,  May  20061’  page  six,  which  highlights  that  a  rapidly  rising  server-installed  base  is  projected  to  drive  an  increase  in  the  cos!  ot 
power  and  cooling  over  the  next  five  years.  2.  PowerExecutive  can  help  save  power  during  periods  of  lower  utilization.  3.  IBM  hardware  products  are  manuiactured  trom 
new  parts,  or  new  and  serviceable  used  pails.  Regardless,  our  warranty  terms  apply.  Telephone  support  may  be  subject  to  additional  charges.  For  ori-sile  labor,  IBM  will 
attempt  to  diagnose  and  resolve  the  problem  remotely  before  sending  a  technician  On-site  warranty  is  available  only  lor  selected  components.  A.  IBM  Global  Financing 
offerings  are  provided  through  IBM  Credil  LLC  in  the  United  Slates  and  other  IBM  subsidiaries  and  divisions  worldwide  to  qualified  commercial  and  government  customers 
Monlhly  payments  provided  are  lor  planning  purposes  only  and  may  vary  based  on  your  credit  and  other  (actors.  Lease  offer  provided  is  based  on  a  FMV  lease  of  36  monthly 
payments.  Other  restrictions  may  apply  Rates  and  offerings  are  subject  to  change,  extension  or  withdrawal  without  notice.  Informattoi  about  non-IBM  products  is  obtained 
from  the  manufacturers  of  those  products  or  their  published  announcements.  IBM  has  not  tested  those  products  and  cannot  confirm  the  performance,  compatibility  or  any 
other  claims  related  to  non-IBM  products.  Questions  on  the  capabilities  of  non-IBM  products  should  be  addressed  to  the  suppliers  ot  those  products.  IBM.  the  IBM  logo 
and  PowerExecutive  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  AMD,  Ihe  AMD 
logo,  AMD  Opteron  and  AMD  PowerNowl  are  trademarks  of  Advanced  Micro  Devices,  Inc,  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks 
of  others.  ©2006  IBM  Corporation.  All  rights  reserved. 


WHY  WAIT? 

PAY  $0  FOR  THE  NEXT  3  MONTHS. 

Get  the  System  x3655  Express 
now  and  defer  payment  for  the 
next  3  months. 

Learn  more  at: 


ibm.com/ 

systems/innovate60 


1  866-872-3902 

mention  104CE45A 
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MARKETPLACE 


www.computerworid.com 


©2006  Network  Instruments,  LLC.  All  rights  reserved.  Network  Instruments,  Observer,  and  all  associated 
logos  are  trademarks  or  registered  trademarks  of  Network  Instruments,  LLC 


a  new  era  of  VoIP  analysis 


>You  convinced  management  to  deploy  VoIP. 
Now  ensure  that  it  will  run  smoothly. 

Rely  on  Network  Instruments'  Observer  to  help  keep 
VoIP  communications  running  at  optimal  performance. 


Learn  more. 

1-800-566-0919 

networkinstruments.com/voip 


Instantly  Search  Terabytes  of  Text 


Contact  dtSearch  for 
fully-functional  evaluations 

The  Smart  Choice  for 
Text  Retrieval®  since  1991 


♦  over  two  dozen  indexed,  unindexed,  fielded 
data  and  full-text  search  options 


♦  highlights  hits  in  HTML,  XML  and  PDF,  while 
displaying  links,  formatting  and[ 


images 


♦  converts  other  file  types  (database,  word 
processor,  spreadsheet,  email  and 
attachments,  ZIP,  Unicode,  etc.)  to  HTML  for 
display  with  highlighted  hits 


♦ 


Spider  supports  static  and  dynamic  Web 
content,  with  WYSWYG  hit-highlighting 


♦  API  supports  .NET/. NET  2.0,  C++,  Java,  SQL 
databases.  New  .NET/. NET  2.0  Spider  API 


dtSearch®  Reviews 


♦  "Bottom  line:  dtSearch  manages  a  terabyte 
of  text  in  a  single  index  and  returns  results 
in  less  than  a  second"  -  InfoWorld 

♦  "For  combing  through  large  amounts 
of  data,  dtSearch  "leads  the  market" 

-  Network  Computing 

♦  "Blindingly  fast"-  Computer  Forensics: 
Incident  Response  Essentials 

♦  "Covers  all  data  sources  ...  powerful  Web- 
based  engines"  -  eWEEK 

♦  "Searches  at  blazing  speeds" 

-  Computer  Reseller  News  Test  Center 

♦  "The  most  powerful  document  search  tool 
on  the  market"-  Wired  Magazine 

For  hundreds  more  reviews  —  and 
developer  case  studies  —  see 
www.dtsearch.com 


1-800-IT-FINDS  •  www.dtsearch.com 


Reach  Respected  IT  Leaders 

COMPUTERWORLD 

Marketplace  Advertising  Section! 

The  Computerworld  Marketplace  advertising  sect! 
reaches  more  than  1.8  million  IT  decision  makers 
week.  Marketplace  advertising  helps  Computerwo 
readers  compare  prices,  search  for  the  best  values, 
locate  new  suppliers  and  find  new  products  and 
for  their  IT  needs. 


Software  Engineer  w/Masters  or 
for.  equiv  in  Comp  Sci  or  Engr  or 
Math  &  1  yr  exp.  *Will  accept 
Bach  or  for.  equiv  +5  yrs  of  pro¬ 
gressive  work  exp  in  lieu  of 
Masters*  &  1  yr  exp.  Research, 
analyze,  dsgn,  dev.,  test  &  main¬ 
tain  client  server  applic.  using 
Oracle,  Access,  Oracle  Forms, 
Oracle  Reports  &  VB  on  Windows 
&  Unix.  Dev.  &  customize  Oracle 
Forms,  Reports  using  Oracle 
GL,  AP  &  AR  (ERP)  applic. 
modules.  Dsgn,  dev.  &  code  con¬ 
version/interface  processes 
betwn  legacy  &  client  server 
applic.  using  PL/SQL.  Dsgn  & 
dev.  Applets  using  Java  &  HTML 
w/data  connectivity.  Mail  res  to: 
BCC  USA-MA,  Inc.,  1506 
Providence  Hwy,  Suite  #27, 
Norwood,  MA  02062.  Job  loc: 
Norwood,  MA  or  in  unanticipated 
locations  in  US. 


Q.A.  Analyst  needed  in 
Wichita,  KA  w/exp  to  pro¬ 
vide  Medallion  dvlpmt  & 
solutions.  Mail  resume  to: 
SoftBrands,  Attn:  J  Miller, 
Two  Meridian  Crossings, 
#800,  Minneapolis,  MN 
55423. 


S/W  Enggs  (Automation): 
Develop,  maintain,  execute 
test  scripts  using  Mercury 
tools  Load  Runner,  Quick  Test 
Pro;  develop  scripts  to  support 
regression  testing;  track, 
review  defects  using  Test 
Director;  perform  integration, 
system,  UA  testing;  gather 
user  reqs,  write  test  plans; 
guide  team.  Req:  MS  or  for¬ 
eign  equiv  in  CS/Engg  (any 
branch)  &  1  yr  exp.  FT.  Comp 
Salary.  Travel  involved. 
Resume:  HR,  Mindrim 

Systems,  4317  Saginaw 
Lane,  Carrollton,  TX  75010 


Sr.  Database  Administrator 
To  administer,  install,  develop, 
analyze,  test,  implement,  tune, 
troubleshoot  and  maintain  Oracle 
database,  train  users.  Req.:  M  S. 
deg  in  Computer  Sc/Eng.,  1  yr’  of 
exp  in  the  job  offered  or  as  a 
IT/Computer  Facilities  Manager, 
proficiency  in  PRISM  PACK, 
COGNOS,  PERL,  ASP,  frequent 
travel  to  unanticipated  client  loca¬ 
tions  within  the  U.S.  F/T.  Send 
resume  to:  Vinnie  Rao,  Ryan 
Consulting  Group,  Inc.,  9515 
East  59th  Street,  Suite  C-1, 
Indianapolis,  IN  46216.  Ref:  Job 
INLV0610. 


Place  Your 
Labor  Certification 
Ads  Here 

For  more  details, 
contact  us  at: 

800.762.2977 
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It's  really  big,  Seriously. 

It's  "40,000  circuits"  big.  So  you've 
got  to  have  a  powerful  mind.  Because 
its  size  is  only  the  first  hurdle.  You  will 
have  to  handle  intense  languages 
like  Java  and  .NET,  too.  But  we  know 
some  of  you  can  tame  the  task.  Even 
if  the  rest  of  your  resume  breaks  into 
a  cold  sweat.  If  you  think  you're  ready, 
come  join  the  State  Farm'1  team. 
Visitstatefarm.com/careers 


LIKE  A  GOOD  NEIGHBOR, 
STATE  FARM  IS  THERE! 


An  lJqmi  Opportunity  Fmpli->yer 


"  -  if: 


«n 
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COVENTRY 


9  First  Health 

A  Covenfry  Health  Cate  Company 


Now  It's  Your  Turn... 

Go  to  www.google.com  and  type  in: 

“Tag  You’re  IT” 


We’re  looking  for  you  - 
a  top  technical 
professional  who  is 
always  looking 
for  more 
challenge 
and  rewards. 

Take  this 
opportunity 
to  explore 
Coventry 
Health  Care 
where  you’ll 
find  a  highly 
rewarding 
professional 
environment  built 
around  meaningful 
projects,  best-in-class 
technologies,  and 
development  opportunities. 


THE  PORT  AUTHORITY  OF  NEW  YORK  &  NEW  JERSEY 

REQUEST  FOR  PROPOSALS  (RFP#  11528) 

FOR  DISTRIBUTED  SYSTEMS 
MANAGEMENT  AND  ADMINISTRATION  SERVICES 

The  Pori  Authority  of  New  York  and  New  Jersey  is  hereby  seeking  proposals  from  firms  that 
provide  Distributed  Systems  Management  and  Administration  for  the  security  and  parking  revenue 
systems  at  JFK,  LaGuardia,  and  Newark  Airports,  and  the  utility  management  system  at  JFK. 
The  successful  firm  will  provide  expert  services  in  system  administration  for  local  area  networks, 
desktops  and  servers,  and  in  the  administration  of  backup,  directories  and  user/group  accounts. 
Functions  will  include:  business  analysis;  data  mining  and  generating  reports;  application  knowledge 
and  configuration;  network  design  and  administration;  systems/database  management  and 
administration;  conventional  systems  administration;  training;  WEB  application  programming; 
applications  server  software  integration  and  deployment;  platform  migration;  and  standard  system 
administration.  Contract  term:  3-year  term  with  two  additional  2-year  options. 

Sealed  proposals  will  be  accepted  at  the  address  indicated  below  until  2:00  pm  December  5, 
2006.  Documents  can  be  requested  via  e-mail  at  askforbids@panynj.gov  or  you  can  fax  your 
proposal  request  to  212-436-3959.  Reference  RFP#  11528  on  all  requests.  Send  bids  to:  The 
Port  Authority  Of  NY  &  NJ,  Purchasing  Services  Division,  Procurement  Department,  One  Madison 
Avenue,  7th  Floor,  New  York,  NY  10010 

A  pre-proposal  meeting  has  been  scheduled  for  November  13, 2006  at  10  AM  at  the  offices  of 
the  Port  Authority  of  NY  &  NJ,  at  One  Madison  Avenue,  7th  floor,  New  York,  NY  10010.  Proposers 
interested  in  attending  shall  RSVP  to  Eric  Wernersbach  (973-961-6499),  no  later  than  noon  of 
the  business  day  preceding  the  scheduled  date  to  confirm  attendance  and/or  receive  traveling 
instructions.  Two  forms  of  photo  ID  are  required  for  entrance  into  the  building.  No  exceptions 
will  be  made. 


Keane  seeks  IT  professionals. 
Currently  based  in  Groton,  CT. 
Must  be  willing  to  be  assigned  to 
client  sites  throughout  the  U.S. 
(multiple  openings)  including: 
(Code  R-1631)  Programmer/ 
Analyst:  BS  or  equiv.  +  2  yrs. 
exp.  in  software  dev.  J2EE, 
Rational  Rose,  XML;  (Code  R- 
1583)  Programmer/Analyst:  BS 
or  equiv  +  1  yr  Software  Dev.  w/ 
Oracle  VB  &  Java  Technologies; 
(Code  R-1564)  Programmer/ 
Analyst:  BS  or  equiv  +  2  yrs  exp 
in  software  dev.  w /  VB,  SQL 
Server  &  ASP;  (Code  R-1696) 
Software  Engineer:  MS  or  equiv 
+3yrs  dev.  Enterprise  Applications 
w /  Documentum  &  Java;  (Code 
R-1636)  Programmer/Analyst: 
BS  or  equiv  +  2  yrs  Data 
Warehousing  w /  Oracle,  Business 
Objects  &  Informatica;  (Code  R- 
1619)  Programmer/Analyst:  BS 
or  equiv  +  2  yrs  design  &  dev.  of 
web  based  business  Applications 
w /  ASP  &  VB  &  at  least  1  yr  w / 
web  design  tools,  Adobe 
Photoshop  &  Dream  Weaver; 
(Code  R-1568)  Programmer/ 
Analyst;  BS  or  equiv  +  2  yrs 
Software  Dev.  w /  Business 
Objects  &  Oracle.  Send  resumes 
w/  Job  Code  to  Keane,  Inc. 
McDermott-JOBS  100  City 
Square,  Boston,  MA  02129 


Senior  Technical  Resources 
Generalist(Personnel  Recruiter): 
5  years'  progressive  responsibility 
in  recruitment,  Information 
Technology,  business  or  a  related 
field.  Applicant  must  have  knowledge 
of  IT  systems,  networks  and  languages, 
including  Siebei,  CRM,  Actuate, 
E-Business,  People  Soft,  SAP, 
Mumps/Cache/IDXand 
Datawarehousing.  Competent 
with  PCs,  Internet  Cbiz  Database 
and  web  searches.  Existing  rela¬ 
tionships  in  IT  is  necessary  for 
success.  Strong  HR  management 
and  recruiting  skills.  Competent 
with  PCs,  Internet  Cbiz  Database 
and  web  searches.  Experience 
budgeting  &  pricing  and  analyzing 
client's  needs  &  skills  assess¬ 
ment.  Ability  to  negotiate  the 
salaries  and  TQM  concepts. 
Ability  to  conduct  technical  inter¬ 
views  along  with  extensive  travel 
to  various  states,  attending  Job 
seminars  and  recruiting  the  right 
candidates  to  fill  job  openings. 
Bachelor  in  Business  Required. 
9-5,  40  hrs/wk.  Reference  HR100 
-JJ  and  send  resume  to  Consulting 
Professional  Resources,  115  Evergreen 
Heights  Drive,  Pittsburgh,  PA15229 
or  to  kfink@cpr-pa.com. 


TECHNOLOGY  PROFESSIONALS- 
Positions  available  nationwide. 
Seeking  candidates  with  a 
BS/MS  in  Computer  Science, 
Applied  Mathematics,  Applied 
Science,  Engineering,  or  Computer 
Information  Systems,  and  prior 
experience,  for  the  position  of 
Staff  Consultant  in  nationwide 
facilities.  Job  duties  include  com¬ 
puter  systems  analysis  and  soft¬ 
ware  development  in  the  capacity 
of  a  computer  Programmer-Analyst. 
Send  your  resume,  including  job 
history,  to:  Sai  People  Solutions, 
Inc.,  2313  Timber  Shadows,  #200, 
Kingwood,  TX  77339,  Attn:  HR. 
Sai  People  Solutions,  Inc.  is  an 
Equal  Opportunity  Employer. 


Software  Engineer 
Whitehouse  Stn,  NJ. 
Develop,  Create  & 
modify  general  computer 
utility  programs.  Analyze  / 
design  databases 
individually  or  as  a 
team.  Apply  to  Advent 
Business  Solutions,  Inc., 
7  Orchard  Drive, 
Whitehouse  Station,  NJ  - 
08889 


Software  Engineer  w/Bach  or 
foreign  equiv.  in  Comp.  Scie. 
or  Engr.  or  Math.  &  1  yr  exp. 
Dsgn,  dev.,  test  &  implmt 
multi-tier  client  server  appli. 
using  MS  Visual  Source  Safe, 
Rational  Rose,  Clear  Quest, 
MS  SQL,  C  ++,  VC++,  MFC, 
ODBC,  MS  Visio,  Socket 
prgmg,  Multithreading  & 
Standard  Template  Library. 
Mail  res  to:  Carlin  Equities 
Corporation,  666  Third  Ave, 
8th  Fir,  NY,  NY,  10017.  Job 
Loc:  NYC  or  Princeton 
Junction.  NJ 


Project  Manager  needed  in 
NJ,  FL  &  other  unanticipated 
client  sites  for  project  & 
release  mgmt  involving  tele¬ 
com  appls.  Mail  resume  to: 
Global  Consultants,  Attn: 
Hireme,  25  Airport  Rd, 
Morristown,  NJ  07960 


Jefferson  Regional  Medical 
Center  seeks  degreed 
and  experienced  Applications 
Engineer  to  work  in  Pine 
Bluff,  AR.  To  implement, 
support  and  maintain  clini¬ 
cal  software  applications  in 
a  healthcare  environment. 
Mail  resume  to  Susanne 
Chambliss,  HR  Manager  at 
1600  West  40th  Ave., 
Pine  Bluff,  AR  71603. 
Put  job  code  8231891001 
on  resume. 


Technical  Team  Lead  for  an 
international  consulting  and  sys¬ 
tems  integration  firm  (Boston, 
MA)  to  be  responsible  for:  sup¬ 
porting  and  managing  business 
development  efforts;  solving 
client  problems  and  managing 
the  technology  track  throughout 
sales  and  development;  facili¬ 
tate  large  and  complex  client 
meetings  and  project  manage 
up  to  $1  Million  in  scope  and  10 
person  project  teams.  Must  be 
viewed  as  a  mentor  and  leader 
by  peers  in  areas  of  custom  soft¬ 
ware  development.  Previous 
experience  leading  and  manag¬ 
ing  technical  teams  and 
implementation  of  detailed  pro¬ 
ject  plans  is  required.  Send 
responses  to  amy@optaros.com. 
Job  #TLRS 


Programmer  Analyst  w/Bach  in 
Comp  Sci  or  Engg  &  2yrs  exp  to 
perform  packaging  of  applic  using 
Wise  Package  Studio  &  Wise  for 
Windows  Installer.  Perform  con¬ 
flict  mgmt  &  Isolation  of  ICE 
errors.  Dsgn  &  dv!p  best  practices 
&  documentation  for  applic  pack¬ 
aging  lifecycle.  Perform  scripting 
using  VB  Script,  install,  configure 
&  maintain  SQL  Server  D/base. 
Dsgn,  implmt  &  configure  SMS 
Suites.  Mail  res.  to:  Integration 
International,  Inc.,  1  Gatehali 
Drive,  Ste  #305,  Parsippany,  NJ 
07054.  Job  Loc:  Parsippany,  NJ. 


Programmer  (Entry  Level) 

To  design  &  develop  application 
projects.  Req.:  B.S.  degree  (or 
foreign  equiv.)  in  Comp  Sc./Eng, 
Mgmt  info  Sys,  Finance,  Business 
Adm.  or  closely  related  field  (will 
accept  an  Associate  degree  and  2 
yrs  of  exp  in  the  job  offered  or  as 
Programmer/Analyst  in  lieu  of 
primary  requirements),  proficiency 
in  Load  Runner,  C,  C++,  HTML, 
Main  Frame,  FoxPro  under 
Windows  &  UNIX.  F/T.  Send 
resume  to:  Raj  Gaddam,  Orpine, 
Inc.,  11785  Northfali  Lane,  Suite 
504,  Alpharetta,  GA  30004. 
Refer  Job:  GAKS0610. 


Programmer  Analyst  w/2  yrs  exp 
to  develop  VB  Scripts,  Kix  Scripts 
&  Wrappers  for  advanced 
Customs  Actions  for  MSI  pack¬ 
ages.  Lead  for  all  conflict  mgmt  & 
isolation  processes  maintaining 
s/ware  repository  using  SQL 
D/base.  Implmt  Applic  Deployment 
products  using  Active  Directory, 
Altiris  Product  Suites,  CMS  & 
SMS.  Use  Wise  Suite  of  Products 
incl  Wise  Package  Studio,  Wise 
for  Windows  Installer  running  on 
Win  2000/2003  servers  &  Win  XP 
SP2  machines.  Mail  res  to: 
Integration  International  Inc.,  1 
Gatehal!  Drive,  Suite  #305, 
Parsippany,  NJ  07054.  Job  Loc: 
Parsippany,  NJ.  Ref#1. 


Juniper  Networks  In  Westford, 
MA  is  currently  recruiting  for: 
Member  of  Technical  Staff 
#2144CW:  Define  functional 
requirements,  design,  imple¬ 
ment,  integrate,  test  and  sup¬ 
port  distributed  embedded 
real-time  software  for  network¬ 
ing  products  and  protocols  Mail 
resumes  with  job  code  #  to 
Attn:  MS  1.1.427  Juniper 
Networks  1194  N.  Mathilda 
Avenue  Sunnyvale,  CA  94089 


Wells  Fargo  has  an  opening  fo 
Information  Security  Engineer  ir 
Chandler,  AZ.  Exp  with  eTrust  CA 
Top  Secret.  Ten  (10)  year 
experience  in  security  consultinc 
using  eTrust  CA-Top  Secret  b 
CA  (Computer  Associates 

Experience  must  include 

Technical  experience  with  eTrus 
CA-Top  Top  Secret  by  C/ 
(Computer  Associates)  capability 
for  mainframe  digital  certificate 
set-up  and  processing,  SSL,  an< 
OMVS  controls;  Experience  wit 
z/OS  integrity  issues,  securib 
interface  techniques,  and  securib 
administration  is  required 
Experience  with  large,  multi-site 
eTrust  CA-Top  Top  Secret  by  C/ 
installations  synchronizing  multiple 
Top  Secret  databases  and  manag 
ing  large  complex  multi-site  Toj 
Secret  environments  using  CPF 
(Command  Propagation  Facility 
and  Experience  making  recom 
mendations,  policies  and  proce 
dures  for  customization  and  per 
formance  tuning  of  eTrust  CA-Tof 
Secret  by  CA.  Please  apply  a 
www.wellsfargo.com  REFER 
ENCING  JOB  CODE  308497( 
when  submitting  resume.  EOE 

r 

. 

t 

; 

t 

Systems  Administrator  to  config¬ 
ure,  support  and  troubleshoot 
Websphere  environment,  analyze 
JVM  cores  and  heap  dumps,  per¬ 
form  shell-scripting  and  basic 
OracleDB  administration,  utilizing 
monitoring  and  configuration 
tools.  Requires  Bachelors  or 
equivalent-level  degree  in 
Computer  Science,  Engineering, 
Mathematics  or  closely  related 
field,  WebSphere  certification, 
and  two  years  experience  in 
WebSphere  administration  in 
UNIX  environment.  Send  resume 
to:  R.  Heinlein,  Ferguson 

Consulting,  12444  Powerscourt 
Drive,  Suite  235,  St.  Louis, 
Missouri  63131.  EOE 
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NEW  SECURITY  AGENDA 

We  pulled  back 
the  sheet  and 

The  data 

now 

discovered  there  is  a 

matters  above 

lot  to  do  [to  protect 

everything  else. 

personal  data]. 

JOHN  CERAOLO, 

PATRICK  HOWARD,  CISO, 

DIRECTOR  OF 

INFORMATION  SECURITY, 

u.b.  1/ErAK  1  MtlM  1  Ur  nUUblNb 

AND  URBAN  DEVELOPMENT 

L _ 

JM  FAMILY  ENTERPRISES  INC. 

_ 4 

Continued  from  page  1 

Data  Security 

mation  security  at  JM  Family 
Enterprises  Inc.,  an  auto  distri¬ 
bution  and  financing  company 
in  Deerfield  Beach,  Fla.,  with 
annual  revenue  of  $9.4  billion. 

Nonpublic  information  of 
all  sorts  needs  to  be  protected, 
whether  it  is  being  stored  on  a 
system  or  actively  used,  said 
Ceraolo.  That  requires  an  in¬ 
creased  focus  within  IT  on  se¬ 
curity  measures  such  as  data 
classification  and  encryption, 
end-user  access  and  authenti¬ 
cation,  and  usage  monitoring 
and  auditing,  he  added. 

‘Blocking  and  Tackling’ 

At  Gaylord  Entertainment 
Co.,  most  of  the  “blocking  and 
tackling”  that  was  needed  to 
address  network  threats  has 
already  been  accomplished, 
said  Mark  Burnett,  director  of 
IT  security  and  compliance  at 
the  Nashville-based  hospital¬ 
ity  company.  Now  the  goal  is 
to  put  multilayered  defenses 
around  data  as  well,  he  said. 

“We’re  layering  technology 
controls  to  make  sure  we  can 
identify  where  the  information 
is  passing  across  our  network,” 
Burnett  said. 

The  driving  force  behind 
the  data  protection  effort 
and  the  company’s  overall  IT 
security  program  is  “reputa¬ 
tion  management,”  he  noted. 
“We’ve  worked  hard  to  build 
the  Gaylord  brand,”  Burnett 
said.  “Any  one  incident  could 
ruin  all  that  work.” 

Also  contributing  to  the 
stronger  focus  on  data  secu¬ 
rity  is  the  need  for  Gaylord  to 
comply  with  regulations  such 
as  the  Sarbanes-Oxley  Act  and 
the  Payment  Card  Industry 
security  standard,  which  was 
established  by  the  major  credit 
card  companies.  “We  abso¬ 
lutely  recognize  the  need  to 
protect  sensitive  information 
and  are  working  hard  to  fulfill 
that  obligation,”  Burnett  said. 

Ann  Garrett,  chief  informa¬ 
tion  security  officer  at  the 


North  Carolina  Office  of  Infor¬ 
mation  Technology  Services 
(OITS)  in  Raleigh,  said  a  new 
state  law  that  governs  the  use 
of  personally  identifiable  in¬ 
formation  is  elevating  the  need 
for  security  controls  at  the 
data  level.  The  law  went  into 
effect  for  the  private  sector  on 
Oct.  1  and  will  start  applying 
to  state  agencies  next  October. 

North  Carolina’s  govern¬ 
ment  has  “a  strong  network 
firewall,  intrusion-detection 
system  and  intrusion-preven¬ 
tion  system,”  said  Garrett. 
What’s  lacking,  she  added, 
are  controls  for  mitigating 
user  errors  at  the  endpoints 
of  networks. 

As  a  result,  there’s  an  in¬ 
creased  focus  within  the  OITS 
on  encrypting  data  and  pro¬ 
viding  the  ability  to  log  and 
audit  user  transactions.  “We 
have  to  add  accountability  and 


BY  ERIC  LAI 

Kevin  Kline  is  president  of  the 
Professional  Association  for 
SQL  Server  (PASS),  an  inde¬ 
pendent  group  for  users  of 
Microsoft  Corp.’s  flagship  data¬ 
base.  PASS  is  holding 
its  annual  conference  in 
Seattle  this  week,  and 
about  2,500  people  are 
expected  to  attend,  ac¬ 
cording  to  Kline,  who 
works  as  technical  strat¬ 
egy  manager  for  SQL 
Server  products  at  Quest 
Software  Inc.  Kline 
spoke  with  Computer- 
world  last  week  about  issues 
such  as  how  PASS  members  feel 
about  SQL  Server  2005  a  year 
after  its  launch. 

Microsoft  won’t  support  versions 
of  SQL  Server  prior  to  the  2005 
release  on  Windows  Vista.  In  fact, 
Vista  users  will  need  to  upgrade 
to  Service  Pack  2  of  SQL  Server 
2005.  Are  users  feeling  pres¬ 
sured  to  upgrade?  I  think  it  is  an 
issue.  I’m  hearing  some  grum¬ 
bling  about  it,  and  it  might  ac¬ 
tually  slow  down  the  adoption 


auditability,”  Garrett  said. 

Within  the  federal  govern¬ 
ment,  high-profile  breaches 
such  as  the  one  at  the  Depart¬ 
ment  of  Veterans  Affairs  ear¬ 
lier  this  year  have  resulted  in 
an  intense  scrutiny  of  data  se¬ 
curity  practices,  according  to 
Patrick  Howard,  CISO  at  the 
Department  of  Housing  and 
Urban  Development. 

Howard  said  during  a 


of  Vista  itself.  People  are  tell¬ 
ing  me  they  don’t  want  to  give 
up  their  existing  database  just 
for  a  new  operating  system. 
There’s  not  enough  in  Vista  to 
force  them  to  do  that. 

From  your  conversations 
with  PASS  members, 
what  percentage  have 
upgraded  to  SQL  Server 
2005?  There  are  many 
shops  with  one  or  two 
instances  of  SQL  Server 
2005  running.  I  don’t 
consider  that  a  strong 
commitment.  Most  SQL 
Server  DBAs  support  a  dozen 
instances  of  the  database  or 
more.  So  in  measuring  serious 
uptake  —  that  is,  DBAs  who 
have  half  or  more  of  their 
boxes  [running]  SQL  Server 
2005  —  I’d  say  it’s  about  20% 
or  so. 

What  features  are  users  still  look¬ 
ing  for  Microsoft  to  add?  There 
is  a  widespread  desire  for 
better  tools.  SQL  Server  2005 
[includes]  a  whole  new  inter¬ 
face  called  SQL  Server  Man- 


panel  discussion  at  last  week’s 
conference  that  Congress, 
the  White  House  Office  of 
Management  and  Budget  and 
HUD’s  inspector  general  “are 
looking  over  our  shoulders 
closely”  on  data  security. 

In  July,  HUD  disclosed  that 
it  had  lost  a  backup  disk  con¬ 
taining  sensitive  information 
on  75 7  current  and  former  em¬ 
ployees.  “We  pulled  back  the 


agement  Studio.  In  some  ways, 
it’s  a  step  back.  There  are  a  lot 
of  new  and  neat  features,  but 
you  hear  a  lot  of  complaints 
about  what  it  doesn’t  do.  For 
example,  SQL  Server  made  its 
name  going  back  to  Version  7.0 
with  its  GUI  and  not  forcing 
DBAs  to  learn  all  of  this  SQL 
code.  With  2005,  new  features 
like  database  mirroring  or  par¬ 
titioning  have  to  be  addressed 
in  code. 

Visual  Studio  has  long  had 
a  feature  called  Intellisense, 
which  is  like  an  auto-complete 
feature  in  Word.  SQL  Server 
users  have  been  begging  for 
something  similar  for  eons.  It 
was  in  the  betas  for  Manage¬ 
ment  Studio  at  one  point,  but 
Microsoft  pulled  it  out. 

Compliance  is  another 
huge  issue.  In  the  old  days, 
people  needed  to  know  who 
had  changed  data.  Now,  many 
shops  need  to  know  who  has 
looked  at  data.  That  capabil¬ 
ity  is  hard  to  build  in  without 
building  in  a  lot  of  overhead. 
But  people  are  looking  to  Mi¬ 
crosoft  for  an  answer. 


sheet  and  discovered  there  is 
a  lot  to  do”  to  protect  personal 
data,  Howard  said. 

By  year’s  end,  the  agency 
expects  to  have  an  implemen¬ 
tation  plan  in  place  for  ad¬ 
dressing  the  security  issues  it 
has  identified  thus  far.  Howard 
said  the  planned  measures 
include  data  encryption,  two- 
factor  authentication  of  users 
and  closer  monitoring  of  user 
activity.  He  didn’t  disclose  a 
timetable  for  completing  the 
implementation  work. 

“There  are  so  many  vulner¬ 
abilities  out  there  that  there 
aren’t  enough  hackers  to  take 
advantage  of  all  of  them,” 
Howard  said.  What’s  really 
important,  he  advised  other 
attendees,  is  taking  a  holistic, 
risk-based  approach  to  secur¬ 
ing  data  and  understanding 
that  it  involves  “people,  proc¬ 
ess  and  technology.”  • 


There  is  also  pain  around 
change  management.  That 
isn’t  a  big  deal  if  you’re  an 
Oracle  DBA  with  just  one  or 
two  servers,  but  if  you’re  a 
SQL  Server  DBA  with  24  serv¬ 
ers  to  patch,  it  can  be  a  real 
pain  in  the  rear.  Right  now,  the 
answers  mostly  come  from 
other  Microsoft  products,  like 
Systems  Management  Server. 
But  that  doesn’t  soothe  a  lot 
of  DBAs,  because  they  don’t 
necessarily  want  to  hand  this 
[issue]  off  to  another  team. 

Microsoft  is  expected  to  release 
SP2  of  SQL  Server  2005  early 
next  year.  It  ties  in  with  collabo¬ 
ration  features,  especially  in 
Office.  What  impact  will  there 
be  on  SQL  Server  DBAs?  After 
a  certain  point,  adding  an¬ 
other  spell  checker  or  template 
doesn’t  change  Office  much. 
But  SQL  Server’s  tie-ins  with 
SharePoint  and  Excel  will  help 
people  make  more  sense  of 
data  and  turn  it  into  action¬ 
able  information.  Most  DBAs 
are  still  assessing  [SP2],  They 
don’t  know  what  will  work 
and  how  much  is  going  to  be 
involved  for  them. » 


SQL  Server  Users  Slow  on  ‘Serious  Uptake’  of  New  DB 
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Let  Internet  Security  Systems  stop 

network  threats  before  they  impact  your  business 


How  do  you  ensure  compliance  and  manage  costs  when  your  security  is  less  than  certain?  Even  "zero-day"  solutions  aren't  fast  enough  to 
protect  against  losses  once  an  Internet  attack  hits.  The  alternative  is  preemptive  security  from  Internet  Security  Systems.  Because  our  enterprise 
solutions  are  based  on  the  world's  most  advanced  vulnerability  research,  only  ISS  can  can  offer  preemptive  security  and  stop  threats  More  they 
impact  your  business.  So  why  rely  on  "reaction"  when  security  can  be  a  sure  thing? 

Need  proof?  Get  a  free  whitepaper,  Preemptive  Security:  Changing  the  Rules ,  at  www.iss.net/proof  or  call  800-776-2362. 


($  Internet  |  Security  |  Systems® 

Ahead  of  the  threat 


NETWORK  &  HOST  INTRUSION  PREVENTION 

©2006  Internet  Security  Systems  Incorporated.  All  rights  reserved  worldwide. 
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IT’s  Bitter  Pill 


SAY  you  walk  into  work  on  Monday  morning  to  find  a  lengthy 
e-mail  message.  It’s  from  a  project  supervisor.  It’s  addressed 
to  everyone  in  the  company.  It  says  a  hugely  expensive, 
mission-critical  application  is  a  failure  that  won’t  scale,  is 
regularly  down  and  is  likely  to  cost  lots  of  money  and  maybe 
even  lives.  And  the  message  appears  to  back  up  those  claims  with  fi¬ 
nancial,  technical  and  historical  detail  (see  story,  page  6). 

If  you’re  a  CIO,  it’s  the  sort  of  thing  that  probably  gives  you  a  sick 
feeling  in  the  pit  of  your  stomach. 

If  you  work  at  Kaiser  Permanente,  it’s  what  happened  last  week. 


And  if  you’re  the  CIO  at  the  not-for-profit 
health  care  giant,  as  Clifford  Dodd  was  last  Mon¬ 
day,  it’s  the  prelude  to  your  departure  —  Dodd 
resigned  the  next  day. 

Wait,  it  gets  uglier.  The  Kaiser  e-mail  message 
didn’t  just  claim  that  Kaiser’s  electronic  medical 
records  system,  HealthConnect,  was  a  $3  billion 
failure.  It  also  claimed  that  Dodd  was  a  director 
for  the  company  that  had  collected  a  $1  million 
consulting  fee  for  recommending  the  product 
HealthConnect  is  based  on. 

And  it  claimed  that  Kaiser  CEO  George 
Halvorson  had  preselected  the  HealthConnect 
technology,  had  ignored  an  internal  Kaiser  en¬ 
gineering  analysis  that  accurately  predicted  it 
wouldn’t  work  at  a  health  care  organization  the 
size  of  Kaiser,  and  had  run  into  similar  problems 
with  the  same  technology  at  his  previous  job 
as  CEO  of  a  smaller  health  plan  in  Minnesota, 
where  the  state  attorney  general  eventually  is¬ 
sued  a  report  blaming  Halvorson  for  high-level 
financial  waste  and  abuse. 

Is  all  this  true?  We  don’t  know  for  sure. 
Halvorson  insists  the  project  supervisor,  25-year- 
old  Justen  Deal,  has  strung  together  facts  but 
has  the  story  wrong.  Kaiser  spokesmen  say 
Dodd’s  departure  had  no  connection 
with  Deal’s  e-mail. 

But  we  do  know  that  Deal  spent 
fruitless  months  going  through 
channels  —  exchanging  letters  with 
Kaiser’s  chief  compliance  officer, 
members  of  Kaiser’s  board,  Kaiser 
lawyers  and  California  government 
officials  —  before  sending  his  mes¬ 
sage  to  180,000  Kaiser  employees 
last  week.  Deal  has  published  those 
letters  and  responses  on  a  Web  site, 

FixKP.org. 

Deal  is  now  on  administrative 
leave.  Dodd  is  gone.  Halvorson  is 
working  to  limit  the  PR  damage. 


Yes,  it’s  a  mess.  How  it  will  play  out  in  the 
weeks  and  months  to  come  remains  unknown. 

But  here’s  something  to  think  about,  something 
more  than  a  little  worrisome:  Halvorson,  Dodd 
and  Deal  are  supposed  to  be  exactly  the  kind  of 
people  that  IT  is  pinning  its  future  on. 

Here’s  a  tech-savvy  CEO  who  takes  an  active 
interest  in  major  IT  projects,  who  in  fact  believes 
that  IT  is  key  to  business  transformation. 

Here’s  a  CIO  who’s  a  trusted  adviser  to  the 
CEO,  one  who  can  deal  with  both  technical  and 
business  barriers  to  a  major  project’s  success. 

And  here’s  a  young,  aggressive,  business-savvy 
IT  worker  who  sees  the  big  picture,  understands 
corporate  politics  and  isn’t  afraid  to  look  beyond 
his  cubicle  walls  to  get  things  done. 

How  many  times  have  you  heard  pundits  (yes, 
me  too)  tell  you  that  we  need  CEOs,  CIOs  and  IT 
staffers  like  these?  That  without  them,  IT  can’t 
gain  the  insight  and  the  clout  it  needs  to  use 
technology  for  solving  business  problems?  That 
these  are  the  people  who  can  wring  real  business 
value  from  IT? 

Instead,  these  people  have  brought  Kaiser 
what  appear  to  be  sweetheart  deals,  cover-ups 
and  damaging  publicity  —  and  that’s  without 
yet  knowing  whether  a  failed  elec¬ 
tronic  health  records  system  really 
has  caused  Kaiser  serious  financial 
losses  and  put  patients  at  risk. 

For  the  record,  I  still  believe  IT 
needs  people  with  these  qualities. 
Not  these  people,  maybe,  and  cer¬ 
tainly  not  these  results.  Still,  tech- 
savvy  CEOs,  tight-with-the-boss 
CIOs  and  business-smart  IT  people 
are  the  future  of  IT. 

But  if  you  think  they’re  the  pre¬ 
scription  that  will  cure  all  your  IT 
ills,  think  again.  At  Kaiser,  at  least, 
they’ve  turned  out  to  be  a  very  bitter 
pill  to  swallow.  * 


FRANK  HAYES,  Computer- 
world's  senior  news  columnist, 
has  covered  IT  for  more  than 
20  years.  Contact  him  at  frank. 
hayes@computerworld.com. 


Good  Idea,  but  Not  Quite  Right 

0n-call  pilot  fish’s  pager  wakes  him  up,  but  there’s 
no  number  to  call  on  the  pager’s  screen  -  just 
"*****♦*»  f,gUres  jps  a  wrong  number  and  goes 
back  to  sleep,  but  for  the  next  five  hours,  it’s  the 
same  thing.  Finally,  he  gets  a  page  with  a  number, 
and  when  he  dials  in,  he  gets  an  immediate  apology. 
Sighs  fish,  “It  seems  that  when  the  prompt  came  to 
enter  the  number  to  dial,  the  user  was  speaking  her 
phone  number  rather  than  pressing  the  keypad.” 


Oh,  Right! 

This  financial 
company  repli¬ 
cates  its  critical 
applications 
with  two  sets  of  sys¬ 
tems  at  different  loca¬ 
tions  on  separate  power 
grids.  For  a  weekend 
disaster  recovery  test, 
one  site  is  completely 
shut  down  to  make  sure 
everything  will  keep 
functioning.  On  Monday, 
pilot  fish  overhears  two 
techs  talking  about  the 
test:  “It  went  really  well 

-  we  shut  down  Site  A 
and  didn't  get  a  single 
alert  from  the  automat¬ 
ed  monitoring  system.” 
“Well,  yes,  but  that's 
because  the  automated 
monitoring  system  isn't 
replicated,  and  it’s 
hosted  at  Site  A.” 

Been  There,  Eh? 

Engineer  at  a  remote 
site  makes  an  emer¬ 
gency  request  for  a 
Windows  XP  CD  so  he 
can  add  some  features 
to  his  desktop.  Support 
pilot  fish  gives  him  the 
network  path  to  the 
directory  with  the  files 
and  ships  the  CD  via 
second-day  delivery 

-  then  gets  called  on 
the  carpet  by  his  boss. 
“Why  did  you  send  the 
CD  second  day  instead 
of  overnight?”  he  fumes. 
Fish:  He  has  network 
access  to  the  direc¬ 


tory  with  all  he 
needs  to  install 
add-on  XP  com¬ 
ponents.  Boss: 
‘OK,  what  is  he 
going  to  do  if  it  asks  for 
the  Windows  CD  during 
the  install?” 

D’oh! 

This  user’s  laptop  won’t 
connect  to  the  Inter¬ 
net.  Pilot  fish  quickly 
learns  why:  a  Trojan 
horse  infection.  “E 
reboot  in  safe  mode, 
update  all  antimalware 
signatures,  scan  and 
remove,  reboot,  deter¬ 
mine  that  the  problem 
is  still  there,  and  then 
try  several  more  apps 
and  online  scanners,  all 
to  no  avail,”  says  fish. 
“Finally,  after  several 
hours,  it  occurs  to  me 
to  navigate  to  where  the 
Trojan  is  saved,  then 
move  it  to  the  Recycle 
Bin  and  empty  it.  Prob¬ 
lem  solved.” 

Not  Just  Yet 

Traveling  user  is  at  a 
hotel  when  his  laptop 
is  stolen.  “We  made 
arrangements  to  have  a 
replacement  shipped  to 
him  right  away,”  says 
an  IT  pilot  fish  back  at 
headquarters.  “When 
we  notified  him,  he 
asked,  ‘Can  you  get  the 
data  off  my  old  comput¬ 
er?’  Yes,  he  meant  the 
one  that  was  stolen!” 


SHARK 

TANK*. 


OSTEAL  A  FEW  MINUTES  to  send  Sharky  your  true 
tale  of  IT  life  at  sharky@computerworld.com. 
You’ll  get  a  snazzy  Shark  shirt  if  I  use  it.  And  check  out 
Sharky ’s  blog,  browse  the  Sharkives  and  sign  up  for  Shark 
Tank  home  delivery  at  computerworld.com/sharky. 


Is  this  how  your  comp 

protects  its  data? 


We  safeguard  your  data... 

wherever  you  are,  whatever  you  do. 

Learn  more  about  how  SafeGuard  Easy  can  help  protect 
your  enterprise  data  by  calling  1 .877.UTIMACO  or 
visiting  http://americas.utimaco.com/safeguard_easy. 
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Utimaco  Safeware  Inc. 
10  Lincoln  Road,  Suite  102,  Foxboro,  MA  02035 
t  #  #  #  •  •  508.543.1008  www.utimaco.com 


Utimaco  Safeware: 

Safeguarding  Data  Across  the  Enterprise 

The  boundaries  of  the  enterprise  no  longer  stop  at  your  front  door.  Your  employees 
are  traveling  the  globe,  and  they're  carrying  your  company's  data  with  them. 

But  computers  are  lost  or  stolen  every  day.  New  removable  media  devices  carry 
gigabytes  of  your  critical  data — and  they  get  lost  or  stolen,  too.  Today's  business 
regulations  demand  unprecedented  protection  of  data;  with  the  challenges  of 
regulatory  compliance  and  accountability,  how  can  you  ensure  that  all  your  data — at 
rest  and  in  motion— is  protected? 

SafeGuard®  Easy  from  Utimaco  Safeware  is  your  first  step.  Certified  to  FIPS  140-2 
Level  1 ,  SafeGuard  Easy  uses  advanced  algorithms  to  encrypt  every  sector  of  data.  Only 
approved  users  entering  the  correct  password  can  unlock  your  data,  keeping 
unauthorized  users  from  accessing  your  company's  most  critical  asset — information. 

SafeGuard  Easy's  hard  disk  encryption  not  only  secures  your  hard  disk,  it  also  works 
with  external  storage  devices  and  removable  media — making  it  the  perfect  solution 
to  securing  USB  flash  drives,  external  hard  drives,  secure  digital  memory  cards,  and 
other  devices. 

SafeGuard  Easy  is  a  cornerstone  of  the  Utimaco  Safeware  enterprise  data  security 
portfolio.  Learn  more  about  how  SafeGuard  Easy  can  help  protect  your  enterprise  data 
by  calling  1-877-UTIMACO  or  visiting  http://americas.utimaco.com/safeguard_easy. 

Founded  in  7  983,  Utimaco  Safeware  is  the  leading  global  manufacturer  of  professional 
IT  security  solutions.  Our  solutions  protect  the  electronic  data  of  companies  and 
governments  against  unauthorized  access  and  guarantee  that  processes  and 
procedures  in  the  electronic  world  are  binding  and  confidential.  Utimaco  Safeware's 
SafeGuard/E  Easy,  with  nearly  four  million  installations,  is  the  world's  best-selling 
solution  for  protecting  data  on  laptops  and  PCs. 
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487  factories,  253,000  people,  $73  billion  in  sales 

On  November  28th,  Nestle  talks  about  bringing  change  to  every  corner  of  the  world 


When  the  world’s  largest  food  and  beverage  company  set  out  to  fundamentally  change  its  operations,  the  result  was  an 
entirely  new  way  of  managing  the  business.  On  the  next  episode  of  “Change  Artists,”  Nestle  CEO  Peter  Brabeck  and 
Deputy  Executive  VP  Chris  Johnson  discuss  how  tackling  change  has  given  them  the  flexibility  to  move  the  company  in 
// 0  new  directions  while  still  maintaining  the  integrity  of  the  brands.  Visit  hp.com/go/changeartjsts  to  watch  the  webcast  or 

cO  :  :  submit  a  question  for  Brabeck  and  Johnson.  You’ll  also  find  a  range  of  resources  for  understanding  and  mastering  change. 

y/V-  Tune  in  to  the  live  show  on  November  28th  at  10  a.m.  EST,  or  watch  on  demand  anytime. 
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